7.2

CVE-2002-0678

CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC procedure.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Caldera ≫ Unixware Version7.0
Caldera ≫ Unixware Version7.1.0
Caldera ≫ Unixware Version7.1.1
Xi Graphics ≫ Dextop Version2.1
Sgi ≫ Irix Version5.2
Sgi ≫ Irix Version5.3
Sgi ≫ Irix Version6.0
Sgi ≫ Irix Version6.0.1
Sgi ≫ Irix Version6.1
Sgi ≫ Irix Version6.2
Sgi ≫ Irix Version6.3
Sgi ≫ Irix Version6.4
Sgi ≫ Irix Version6.5
Sgi ≫ Irix Version6.5.1
Sgi ≫ Irix Version6.5.2
Sgi ≫ Irix Version6.5.3
Sgi ≫ Irix Version6.5.4
Sgi ≫ Irix Version6.5.5
Sgi ≫ Irix Version6.5.6
Sgi ≫ Irix Version6.5.7
Sgi ≫ Irix Version6.5.8
Sgi ≫ Irix Version6.5.9
Sgi ≫ Irix Version6.5.10
Sgi ≫ Irix Version6.5.11
Sgi ≫ Irix Version6.5.12
Sgi ≫ Irix Version6.5.13
Sgi ≫ Irix Version6.5.14
Sgi ≫ Irix Version6.5.15
Sgi ≫ Irix Version6.5.16
Caldera ≫ Openunix Version8.0
Compaq ≫ Tru64 Version4.0f
Compaq ≫ Tru64 Version4.0g
Compaq ≫ Tru64 Version5.0a
Compaq ≫ Tru64 Version5.1
Compaq ≫ Tru64 Version5.1a
Hp ≫ Hp-ux Version10.10
Hp ≫ Hp-ux Version10.20
Hp ≫ Hp-ux Version10.24
Hp ≫ Hp-ux Version11.00
Hp ≫ Hp-ux Version11.11
Ibm ≫ Aix Version4.3.3
Ibm ≫ Aix Version5.1
Sun ≫ Solaris Version2.6
Sun ≫ Solaris Version9.0 Editionsparc
Sun ≫ Sunos Version5.5.1
Sun ≫ Sunos Version5.7
Sun ≫ Sunos Version5.8
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 9.42% 0.948
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.28/CSSA-2002-SCO.28.txt
http://marc.info/?l=bugtraq&m=102635906423617&w=2
http://www.cert.org/advisories/CA-2002-20.html
Patch
Third Party Advisory
US Government Resource
ftp://patches.sgi.com/support/free/security/advisories/20021101-01-P
http://archives.neohapsis.com/archives/aix/2002-q3/0002.html
http://www.iss.net/security_center/static/9527.php
http://www.kb.cert.org/vuls/id/299816
Patch
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/5083
http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0207-199
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A175
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2770
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A80