7.2 - CVE-2002-0678

Executive Summary

Informations
Name	CVE-2002-0678	First vendor Publication	2002-07-23
Vendor	Cve	Last vendor Modification	2024-11-20

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score	7.2	Attack Range	Local
Cvss Impact Score	10	Attack Complexity	Low
Cvss Expoit Score	3.9	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC procedure.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0678

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:175

Oval ID:	oval:org.mitre.oval:def:175
Title:	Solaris 8 CDE ToolTalk Database Server Symbolic Link Vulnerability
Description:	CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC procedure.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2002-0678	Version:	3
Platform(s):	Sun Solaris 8	Product(s):	Common Desktop Environment
Definition Synopsis:
Software section Solaris 8 Installed AND File rpc.ttdbserverd exists AND NOT Patch 110286-09 or later installed AND Configuration section inetd.conf contains rpc.ttdbserverd AND inetd running AND File rpc.ttdbserverd executable File rpc.ttdbserverd executable AND File rpc.ttdbserverd executable AND File rpc.ttdbserverd executable

Definition Id: oval:org.mitre.oval:def:2770

Oval ID:	oval:org.mitre.oval:def:2770
Title:	Solaris 9 CDE ToolTalk Database Server Symbolic Link Vulnerability
Description:	CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC procedure.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2002-0678	Version:	5
Platform(s):	Sun Solaris 9	Product(s):	Common Desktop Environment
Definition Synopsis:
Software section Solaris 9 Installed AND Toolktalk (SUNWtltk/SUNWtltkx) installed AND NOT Patch 112808-02 or later installed AND Configuration section inetd running AND inetd.conf contains rpc.ttdbserverd

Definition Id: oval:org.mitre.oval:def:80

Oval ID:	oval:org.mitre.oval:def:80
Title:	Solaris 7 CDE ToolTalk Database Symbolic Link Vulnerability
Description:	CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC procedure.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2002-0678	Version:	3
Platform(s):	Sun Solaris 7	Product(s):	Common Desktop Environment
Definition Synopsis:
Software section Solaris 7 Installed AND File rpc.ttdbserverd exists AND NOT Patch 107893-19 or later installed AND Configuration section inetd.conf contains rpc.ttdbserverd AND inetd running AND File rpc.ttdbserverd executable File rpc.ttdbserverd executable AND File rpc.ttdbserverd executable AND File rpc.ttdbserverd executable

CPE : Common Platform Enumeration

Type	Description	Count
Application	Caldera Unixware cpe:2.3:a:caldera:unixware:7.1.1:::::::* cpe:2.3:a:caldera:unixware:7.1.0:::::::* cpe:2.3:a:caldera:unixware:7.0:::::::*	3
Application	Xi Graphics Dextop cpe:2.3:a:xi_graphics:dextop:2.1:::::::*	1
Os	Caldera Openunix cpe:2.3:o:caldera:openunix:8.0:::::::*	1
Os	Compaq tru64 cpe:2.3:o:compaq:tru64:5.1a:::::::* cpe:2.3:o:compaq:tru64:5.1:::::::* cpe:2.3:o:compaq:tru64:5.0a:::::::* cpe:2.3:o:compaq:tru64:4.0g:::::::* cpe:2.3:o:compaq:tru64:4.0f:::::::*	5
Os	Hp Hp-Ux cpe:2.3:o:hp:hp-ux:11.11:::::::* cpe:2.3:o:hp:hp-ux:11.00:::::::* cpe:2.3:o:hp:hp-ux:10.24:::::::* cpe:2.3:o:hp:hp-ux:10.20:::::::* cpe:2.3:o:hp:hp-ux:10.10:::::::*	5
Os	Ibm Aix cpe:2.3:o:ibm:aix:5.1:::::::* cpe:2.3:o:ibm:aix:4.3.3:::::::*	2
Os	Sgi Irix cpe:2.3:o:sgi:irix:6.5.9:::::::* cpe:2.3:o:sgi:irix:6.5.8:::::::* cpe:2.3:o:sgi:irix:6.5.7:::::::* cpe:2.3:o:sgi:irix:6.5.6:::::::* cpe:2.3:o:sgi:irix:6.5.5:::::::* cpe:2.3:o:sgi:irix:6.5.4:::::::* cpe:2.3:o:sgi:irix:6.5.3:::::::* cpe:2.3:o:sgi:irix:6.5.2:::::::* cpe:2.3:o:sgi:irix:6.5.16:::::::* cpe:2.3:o:sgi:irix:6.5.15:::::::* cpe:2.3:o:sgi:irix:6.5.14:::::::* cpe:2.3:o:sgi:irix:6.5.13:::::::* cpe:2.3:o:sgi:irix:6.5.12:::::::* cpe:2.3:o:sgi:irix:6.5.11:::::::* cpe:2.3:o:sgi:irix:6.5.10:::::::* cpe:2.3:o:sgi:irix:6.5.1:::::::* cpe:2.3:o:sgi:irix:6.5:::::::* cpe:2.3:o:sgi:irix:6.4:::::::* cpe:2.3:o:sgi:irix:6.3:::::::* cpe:2.3:o:sgi:irix:6.2:::::::* cpe:2.3:o:sgi:irix:6.1:::::::* cpe:2.3:o:sgi:irix:6.0.1:::::::* cpe:2.3:o:sgi:irix:6.0:::::::* cpe:2.3:o:sgi:irix:5.3:::::::* cpe:2.3:o:sgi:irix:5.2:::::::*	25
Os	Sun Solaris cpe:2.3:o:sun:solaris:9.0::sparc:::::	1
Os	Sun Sunos cpe:2.3:o:sun:sunos:5.8:::::::* cpe:2.3:o:sun:sunos:5.7:::::::* cpe:2.3:o:sun:sunos:5.6:::::::* cpe:2.3:o:sun:sunos:5.5.1:::::::*	4

OpenVAS Exploits

Date	Description
2011-09-27	Name : CDE ToolTalk RPC Database Server Multiple Vulnerabilities File : nvt/secpod_tooltalk_rpc_database_server_mult_vuln.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
4508	CDE ToolTalk Transaction Log Symlink Arbitrary File Overwrite

Sources (Detail)

ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.28/CSSA-2002-SCO.28.txt
ftp://patches.sgi.com/support/free/security/advisories/20021101-01-P
http://archives.neohapsis.com/archives/aix/2002-q3/0002.html
http://archives.neohapsis.com/archives/aix/2002-q3/0002.html
http://marc.info/?l=bugtraq&m=102635906423617&w=2
http://www.cert.org/advisories/CA-2002-20.html
http://www.iss.net/security_center/static/9527.php
http://www.kb.cert.org/vuls/id/299816
http://www.securityfocus.com/bid/5083
http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0207-199
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...

Source	Url

Alert History

If you want to see full details history, please login or register.

Date	Informations
2024-11-28 23:23:54	Multiple Updates
2024-11-28 12:05:05	Multiple Updates
2024-08-02 12:02:13	Multiple Updates
2024-08-02 01:01:20	Multiple Updates
2024-02-02 01:02:00	Multiple Updates
2024-02-01 12:01:21	Multiple Updates
2023-09-05 12:01:55	Multiple Updates
2023-09-05 01:01:12	Multiple Updates
2023-09-02 12:01:56	Multiple Updates
2023-09-02 01:01:13	Multiple Updates
2023-08-12 12:02:18	Multiple Updates
2023-08-12 01:01:13	Multiple Updates
2023-08-11 12:02:00	Multiple Updates
2023-08-11 01:01:14	Multiple Updates
2023-08-06 12:01:51	Multiple Updates
2023-08-06 01:01:14	Multiple Updates
2023-08-04 12:01:55	Multiple Updates
2023-08-04 01:01:13	Multiple Updates
2023-07-14 12:01:53	Multiple Updates
2023-07-14 01:01:14	Multiple Updates
2023-03-29 01:01:52	Multiple Updates
2023-03-28 12:01:19	Multiple Updates
2022-10-11 12:01:41	Multiple Updates
2022-10-11 01:01:06	Multiple Updates
2021-05-04 12:01:42	Multiple Updates
2021-04-22 01:01:50	Multiple Updates
2020-05-23 00:15:00	Multiple Updates
2018-10-31 00:19:41	Multiple Updates
2017-10-10 09:23:24	Multiple Updates
2016-10-18 12:01:02	Multiple Updates
2016-06-28 14:59:06	Multiple Updates
2016-04-26 12:11:26	Multiple Updates
2013-05-11 12:10:09	Multiple Updates

Type	Count
Oval ID(s)	3
CPE ID(s)	47
Sources(s)	13
osvdb(s)	1
Openvas Exploit(s)	1

7.2 - CVE-2002-0678

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

OVAL Definitions

CPE : Common Platform Enumeration

OpenVAS Exploits

Open Source Vulnerability Database (OSVDB)

Sources (Detail)

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU