CVE

Id
5067  
CVE No.
CVE-2002-0677  
Status
Candidate  
Description
CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument in an AUTH_UNIX procedure call, which is used as a table index by the _TT_ISCLOSE procedure.  
Phase
Modified (20071129)  
Votes
ACCEPT(4) Armstrong, Baker, Cole, Wall | MODIFY(1) Frech | NOOP(3) Christey, Cox, Foat  
Comments
Christey> XF:tooltalk-ttdbserverd-ttisclose-validation(9526) | URL:http://www.iss.net/security_center/static/9526.php | BID:5082 | URL:http://www.securityfocus.com/bid/5082 | | HP:HPSBUX0207-199 | URL:http://archives.neohapsis.com/archives/hp/2002-q3/0011.html | Note: while the HP advisory discusses "buffer overflows," | it specifically mentions CA-2002-20, and the text of the | advisory is included in vendor statements for the CERT-VU"s for both | ToolTalk issues covered by CA-2002-20. | | AIXAPAR:IY32368 | URL:http://archives.neohapsis.com/archives/aix/2002-q3/0002.html | AIXAPAR:IY32370 | URL:http://archives.neohapsis.com/archives/aix/2002-q3/0002.html | Christey> HP:HPSBUX0207-199 | URL:http://online.securityfocus.com/advisories/4290 | Christey> SGI:20021101-01-P | Christey> Sun confirmed via email to Matt Wojcik (of MITRE"s OVAL | project) that Sun alert 46022 also addresses this issue. | Frech> XF:tooltalk-ttdbserverd-ttisclose-validation(9526)  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
26550 5067 CVE-2002-0677 BUGTRAQ:20020710 [CORE-20020528] Multiple vulnerabilities in ToolTalk Database server  View
26551 5067 CVE-2002-0677 URL:http://marc.info/?l=bugtraq&m=102635906423617&w=2  View
26552 5067 CVE-2002-0677 SGI:20021102-02-P  View
26553 5067 CVE-2002-0677 URL:ftp://patches.sgi.com/support/free/security/advisories/20021102-02-P  View
26554 5067 CVE-2002-0677 CERT:CA-2002-20  View
26555 5067 CVE-2002-0677 URL:http://www.cert.org/advisories/CA-2002-20.html  View
26556 5067 CVE-2002-0677 CERT-VN:VU#975403  View
26557 5067 CVE-2002-0677 URL:http://www.kb.cert.org/vuls/id/975403  View
26558 5067 CVE-2002-0677 CALDERA:CSSA-2002-SCO.28  View
26559 5067 CVE-2002-0677 URL:ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.28/CSSA-2002-SCO.28.txt  View
26560 5067 CVE-2002-0677 OVAL:oval:org.mitre.oval:def:15  View
26561 5067 CVE-2002-0677 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15  View
26562 5067 CVE-2002-0677 OVAL:oval:org.mitre.oval:def:91  View
26563 5067 CVE-2002-0677 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:91  View
26564 5067 CVE-2002-0677 OVAL:oval:org.mitre.oval:def:1099  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63829 JVNDB-2002-000156 CDE ToolTalk のファイルディスクリプタの解析処理における任意のコードを実行される脆弱性 CDE ToolTalk において、メモリ上のファイルディスクリプタを書き換えることにより、メモリ空間が上書きされる脆弱性が存在します。 CVE-2002-0677 5067 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000156.html  View