CyberSec.Space Logo
Back to CVE Browser

CVE-2001-0717

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1450%
EPSS Percentile10.18th
PublishedOct 30, 2001
Last ModifiedApr 16, 2026

Vulnerability Description

Format string vulnerability in ToolTalk database server rpc.ttdbserverd allows remote attackers to execute arbitrary commands via format string specifiers that are passed to the syslog function.

Affected Platforms (CPE)

📦
Tooltalk

Tooltalk Database Server

All versions

References & Advisories

🔗 ftp://stage.caldera.com/pub/security/openunix/CSSA-2001-SCO.28/CSSA-2001-SCO.28.txt
🔗 http://ftp.support.compaq.com/patches/.new/html/SSRT0767U.shtml
🔗 http://online.securityfocus.com/advisories/3584
🔗 http://securitytracker.com/id?1002479
🔗 http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/212
🔗 http://www.cert.org/advisories/CA-2001-27.html
🔗 http://www.ciac.org/ciac/bulletins/m-002.shtml
🔗 http://www.securityfocus.com/bid/3382

Related Vulnerabilities

CVE-1999-000310.0

Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd).

CVE-2002-067910.0

Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to exec...

CVE-2002-06777.5

CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibl...

CVE-2002-06787.2

CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction ...