NetSight
IP …
high7.2

CVE-2002-0678

CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRAN…

Impact

CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC procedure.

Affected products

VendorProductAffected versions
CalderaUnixware
Versions 7.0, 7.1.0, 7.1.1
Xi GraphicsDextop
Version 2.1
SgiIrix
Versions 5.2, 5.3, 6.0, 6.0.1, 6.1, 6.2
CalderaOpenunix
Version 8.0
CompaqTru64
Versions 4.0f, 4.0g, 5.0a, 5.1, 5.1a
HpHp-Ux
Versions 10.10, 10.20, 10.24, 11.00, 11.11
IbmAix
Versions 4.3.3, 5.1
SunSolaris
Versions 2.6, 9.0
SunSunos
Versions 5.5.1, 5.7, 5.8

References