CVE-2002-0679

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 23.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-09-05 · updated 2026-06-16

Description

Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to execute arbitrary code via an argument to the _TT_CREATE_FILE procedure.

Affected products

Caldera Openunix: 8.0
Caldera Unixware: 7.0, 7.1.0, 7.1.1
Compaq Tru64: 4.0f, 4.0g, 5.0a, 5.1, 5.1a
Hewlett Packard Enterprise (HPE) HP-UX: 10.10, 10.20, 10.24, 11.00, 11.11
IBM AIX: 4.3.3, 5.1
Sun Solaris: 2.6, 9.0
Sunos: 5.5.1, 5.7, 5.8
Xi Graphics Dextop: 2.1

References

http://marc.info/?l=bugtraq&m=102917002523536&w=2
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F46366&zone_32=category%3Asecurity
http://www-1.ibm.com/support/search.wss?rs=0&q=IY32792&apar=only
http://www-1.ibm.com/support/search.wss?rs=0&q=IY32793&apar=only
http://www.cert.org/advisories/CA-2002-26.html
http://www.iss.net/security_center/static/9822.php
http://www.kb.cert.org/vuls/id/387387
http://www.securityfocus.com/bid/5444
http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0207-199
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A177
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A192
http://marc.info/?l=bugtraq&m=102917002523536&w=2

Get alerted when CVE-2002-0679 or the next vulnerability affects your stack