CVE-1999-0687

The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands...

EUVD-1999-0669

Malware in sbrugna...

HP-UX Security patch : PHSS_19747

The remote host is missing HP-UX Security Patch number PHSS19747 . Security Vulnerability in CDE ttsession Rev.01 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16499;...

HP-UX PHSS_19748 : HPSBUX9909-103 Security Vulnerability in CDE ttsession (Rev.01)

s700800 11.00 CDE Runtime SEP 99 Cumulative Patch : ttsession uses weak RPC authentication mechanism. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS19748. The text itself is copyright C Hewlett-Packard...

HP-UX Security patch : PHSS_19819

The remote host is missing HP-UX Security Patch number PHSS19819 . Security Vulnerability in CDE ttsession Rev.01 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16484;...

CVE-1999-1461

The CVE-1999-1461 issue affects IRIX 5.3–6.5.10 where inpview trusts the PATH env var to locate and execute ttsession. A local user can modify PATH to point to a Trojan horse ttsession, enabling privilege escalation to root. The root cause is PATH-based resolution of ttsession, leading to arbitra...

CVE-1999-0687

Technical details (affected product/version, impact, remediation) are not publicly available in the provided documents. Monitor for updates from authoritative sources.

CVE-1999-0687: Undefined Security Weakness

The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands...

ttsession_vuln.txt

Subject: Vulnerability in ttsession To: [email protected] Hello, I discovered the following security problem in ttsession, part of CDE: Description ----------- The ToolTalk session daemon ttsession does not properly check client credentials. Impact ------ The insufficient check can lead t...