critical10.0

CVE-2004-0368

Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to execute arbitrary code via a crafted XDMC…

Impact

Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to execute arbitrary code via a crafted XDMCP packet.

Affected products

Vendor	Product	Affected versions
Open Group	Cde Common Desktop Environment	Versions 1.0.1, 1.0.2, 1.1, 1.2, 2.0, 2.1
Xi Graphics	Dextop	Versions 2.1, 3.0
Ibm	Aix	Versions 4.3.3, 5.1, 5.2

Weakness classification

CWE-119

References

NVD record
CVE.org record
http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0064.html
http://lists.immunitysec.com/pipermail/dailydave/2004-March/000402.html
http://secunia.com/advisories/11210/
http://secunia.com/advisories/11214/
http://secunia.com/advisories/11495/
http://secunia.com/advisories/11614/
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101478-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-57539-1&searchclause=security
http://www.auscert.org.au/render.html?it=4103&cid=3734
http://www.ciac.org/ciac/bulletins/o-129.shtml
http://www.immunitysec.com/downloads/dtlogin.sxw.pdf
http://www.kb.cert.org/vuls/id/179804
http://www.securityfocus.com/bid/9958
https://exchange.xforce.ibmcloud.com/vulnerabilities/15581
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1436
http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0064.html
http://lists.immunitysec.com/pipermail/dailydave/2004-March/000402.html
http://secunia.com/advisories/11210/
http://secunia.com/advisories/11214/
http://secunia.com/advisories/11495/
http://secunia.com/advisories/11614/
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101478-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-57539-1&searchclause=security
http://www.auscert.org.au/render.html?it=4103&cid=3734
http://www.ciac.org/ciac/bulletins/o-129.shtml