CVE-2001-0717

Published: Oct 30, 2001Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Format string vulnerability in ToolTalk database server rpc.ttdbserverd allows remote attackers to execute arbitrary commands via format string specifiers that are passed to the syslog function.

Affected (1)

Products: Tooltalk: Tooltalk Database Server

Tooltalk

1 product

Tooltalk Database Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Tooltalk Tooltalk Database Server	All versions

References (20)

ftp://stage.caldera.com/pub/security/openunix/CSSA-2001-SCO.28/CSSA-2001-SCO.28.txt (unsafe URL)

Source: cve@mitre.org

http://ftp.support.compaq.com/patches/.new/html/SSRT0767U.shtml

Source: cve@mitre.org

http://online.securityfocus.com/advisories/3584

Source: cve@mitre.org

http://securitytracker.com/id?1002479

Source: cve@mitre.org

http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/212

Source: cve@mitre.org

http://www.cert.org/advisories/CA-2001-27.html

Source: cve@mitre.org

US Government Resource

http://www.ciac.org/ciac/bulletins/m-002.shtml

Source: cve@mitre.org

http://www.securityfocus.com/bid/3382

Source: cve@mitre.org

http://xforce.iss.net/alerts/advise98.php

Source: cve@mitre.org

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/7069

Source: cve@mitre.org

ftp://stage.caldera.com/pub/security/openunix/CSSA-2001-SCO.28/CSSA-2001-SCO.28.txt (unsafe URL)