CVE-2002-0677

No fix known EPSS 7%

CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument in an AUTH_UNIX procedure call, which is used as a table index by the _TT_ISCLOSE procedure.

Published 2002-07-12 · CVE record · OSV

Products: caldera unixware, xi_graphics dextop, sgi irix, caldera openunix, compaq tru64, hp-ux, ibm aix, sun solaris, sunos