7.5

CVE-2002-0677

CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument in an AUTH_UNIX procedure call, which is used as a table index by the _TT_ISCLOSE procedure.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Caldera ≫ Unixware Version 7
Caldera ≫ Unixware Version 7.1.1
Caldera ≫ Unixware Version 7.1_.0
Xi Graphics ≫ Dextop Version 2.1
Sgi ≫ Irix Version 5.2
Sgi ≫ Irix Version 5.3
Sgi ≫ Irix Version 6.0
Sgi ≫ Irix Version 6.0.1
Sgi ≫ Irix Version 6.1
Sgi ≫ Irix Version 6.2
Sgi ≫ Irix Version 6.3
Sgi ≫ Irix Version 6.4
Sgi ≫ Irix Version 6.5
Sgi ≫ Irix Version 6.5.1
Sgi ≫ Irix Version 6.5.2
Sgi ≫ Irix Version 6.5.3
Sgi ≫ Irix Version 6.5.4
Sgi ≫ Irix Version 6.5.5
Sgi ≫ Irix Version 6.5.6
Sgi ≫ Irix Version 6.5.7
Sgi ≫ Irix Version 6.5.8
Sgi ≫ Irix Version 6.5.9
Sgi ≫ Irix Version 6.5.10
Sgi ≫ Irix Version 6.5.11
Sgi ≫ Irix Version 6.5.12
Sgi ≫ Irix Version 6.5.13
Sgi ≫ Irix Version 6.5.14
Sgi ≫ Irix Version 6.5.15
Sgi ≫ Irix Version 6.5.16
Caldera ≫ Openunix Version 8.0
Compaq ≫ Tru64 Version 4.0f
Compaq ≫ Tru64 Version 4.0g
Compaq ≫ Tru64 Version 5.0a
Compaq ≫ Tru64 Version 5.1
Compaq ≫ Tru64 Version 5.1a
Hp ≫ Hp-ux Version 10.10
Hp ≫ Hp-ux Version 10.20
Hp ≫ Hp-ux Version 10.24
Hp ≫ Hp-ux Version 11.00
Hp ≫ Hp-ux Version 11.11
Ibm ≫ Aix Version 4.3.3
Ibm ≫ Aix Version 5.1
Sun ≫ Solaris Version 2.6
Sun ≫ Sunos Version 5.5.1
Sun ≫ Sunos Version 5.7
Sun ≫ Sunos Version 5.8
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.57% 0.93
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.28/CSSA-2002-SCO.28.txt
ftp://patches.sgi.com/support/free/security/advisories/20021102-02-P
http://marc.info/?l=bugtraq&m=102635906423617&w=2
http://www.cert.org/advisories/CA-2002-20.html
Patch
Third Party Advisory
US Government Resource
http://www.kb.cert.org/vuls/id/975403
Patch
Third Party Advisory
US Government Resource
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1099
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A91