CVE-2002-0678: Undefined Security Weakness

CDE ToolTalk database server ttdbserver allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the TTTRANSACTION RPC procedure...

CVE-2002-0677

The CVE-2002-0677 entry affects the CDE ToolTalk RPC database server (rpc.ttdbserverd). The OpenVAS/Core/CORE documentation confirms the vulnerability: an attacker can exploit improper range checking on the AUTH_UNIX file descriptor argument passed to _TT_ISCLOSE, using it as an index into a 128-...

CVE-2002-0677: Undefined Security Weakness

CDE ToolTalk database server ttdbserver allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument in an AUTHUNIX procedure call, which is used as a table index by the TTISCLOSE procedure...

CVE-1999-1075

inetd in AIX 4.1.5 assigns a dynamic port N for ttdbserver but also listens on port N-1 and does not pass control to ttdbserver. This enables a denial of service via a flood of connections to N-1 that are not properly closed by inetd. No exploits or remediation are provided in the supplied docume...

CVE-1999-1075: Undefined Security Weakness

inetd in AIX 4.1.5 dynamically assigns a port N when starting ttdbserver ToolTalk server, but also inadvertently listens on port N-1 without passing control to ttdbserver, which allows remote attackers to cause a denial of service via a large number of connections to port N-1, which are not...

Sun Solaris 7.0 - rpc.ttdbserver Denial of Service

// source: https://www.securityfocus.com/bid/811/info It is possible to crash rpc.ttdbserver by using the old tddbserver buffer overflow exploit. This problem is caused by a NULL pointer being dereferenced when rpc function 15 is called with garbage. You cannot make rpc.ttdbserver execute arbitra...