7.2

CVE-2002-0678

CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC procedure.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Caldera ≫ Unixware Version 7.0
Caldera ≫ Unixware Version 7.1.0
Caldera ≫ Unixware Version 7.1.1
Xi Graphics ≫ Dextop Version 2.1
Sgi ≫ Irix Version 5.2
Sgi ≫ Irix Version 5.3
Sgi ≫ Irix Version 6.0
Sgi ≫ Irix Version 6.0.1
Sgi ≫ Irix Version 6.1
Sgi ≫ Irix Version 6.2
Sgi ≫ Irix Version 6.3
Sgi ≫ Irix Version 6.4
Sgi ≫ Irix Version 6.5
Sgi ≫ Irix Version 6.5.1
Sgi ≫ Irix Version 6.5.2
Sgi ≫ Irix Version 6.5.3
Sgi ≫ Irix Version 6.5.4
Sgi ≫ Irix Version 6.5.5
Sgi ≫ Irix Version 6.5.6
Sgi ≫ Irix Version 6.5.7
Sgi ≫ Irix Version 6.5.8
Sgi ≫ Irix Version 6.5.9
Sgi ≫ Irix Version 6.5.10
Sgi ≫ Irix Version 6.5.11
Sgi ≫ Irix Version 6.5.12
Sgi ≫ Irix Version 6.5.13
Sgi ≫ Irix Version 6.5.14
Sgi ≫ Irix Version 6.5.15
Sgi ≫ Irix Version 6.5.16
Caldera ≫ Openunix Version 8.0
Compaq ≫ Tru64 Version 4.0f
Compaq ≫ Tru64 Version 4.0g
Compaq ≫ Tru64 Version 5.0a
Compaq ≫ Tru64 Version 5.1
Compaq ≫ Tru64 Version 5.1a
Hp ≫ Hp-ux Version 10.10
Hp ≫ Hp-ux Version 10.20
Hp ≫ Hp-ux Version 10.24
Hp ≫ Hp-ux Version 11.00
Hp ≫ Hp-ux Version 11.11
Ibm ≫ Aix Version 4.3.3
Ibm ≫ Aix Version 5.1
Sun ≫ Solaris Version 2.6
Sun ≫ Solaris Version 9.0 Edition sparc
Sun ≫ Sunos Version 5.5.1
Sun ≫ Sunos Version 5.7
Sun ≫ Sunos Version 5.8
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 9.42% 0.948
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.28/CSSA-2002-SCO.28.txt
http://marc.info/?l=bugtraq&m=102635906423617&w=2
http://www.cert.org/advisories/CA-2002-20.html
Patch
Third Party Advisory
US Government Resource
ftp://patches.sgi.com/support/free/security/advisories/20021101-01-P
http://archives.neohapsis.com/archives/aix/2002-q3/0002.html
http://www.iss.net/security_center/static/9527.php
http://www.kb.cert.org/vuls/id/299816
Patch
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/5083
http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0207-199
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A175
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2770
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A80