CyberSec.Space Logo
CVEブラウザに戻る

CVE-2001-0717

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1450%
EPSS Percentile10.18th
Published2001年10月30日
Last Modified2026年4月16日

Vulnerability Description

Format string vulnerability in ToolTalk database server rpc.ttdbserverd allows remote attackers to execute arbitrary commands via format string specifiers that are passed to the syslog function.

Affected Platforms (CPE)

📦
Tooltalk

Tooltalk Database Server

All versions

References & Advisories

🔗 ftp://stage.caldera.com/pub/security/openunix/CSSA-2001-SCO.28/CSSA-2001-SCO.28.txt
🔗 http://ftp.support.compaq.com/patches/.new/html/SSRT0767U.shtml
🔗 http://online.securityfocus.com/advisories/3584
🔗 http://securitytracker.com/id?1002479
🔗 http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/212
🔗 http://www.cert.org/advisories/CA-2001-27.html
🔗 http://www.ciac.org/ciac/bulletins/m-002.shtml
🔗 http://www.securityfocus.com/bid/3382

関連する脆弱性情報

CVE-1999-000310.0

Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd).

CVE-2002-067910.0

Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to exec...

CVE-2002-06777.5

CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibl...

CVE-2002-06787.2

CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction ...