Cde Security Vulnerabilities

CVE-1999-0687

The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands.

CVE-1999-0689

The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack.

CVE-1999-0690

HP CDE program includes the current directory in root's PATH variable.

CVE-1999-0691

Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name.

CVE-1999-0713

The dtlogin program in Compaq Tru64 UNIX allows local users to gain root privileges.