CVE-2002-0677

Published: Jul 23, 2002Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument in an AUTH_UNIX procedure call, which is used as a table index by the _TT_ISCLOSE procedure.

Affected (46)

Products: Caldera: Unixware, Openunix · Sgi: Irix · Xi Graphics: Dextop · +4 more

Show all products

Caldera: Unixware, Openunix · Sgi: Irix · Xi Graphics: Dextop · Compaq: Tru64 · Hp: Hp Ux · Ibm: Aix · Sun: Solaris, Sunos

2 products

1 product

1 product

1 product

1 product

1 product

2 products

Configuration A

29 vulnerable

Vulnerable Software	Affected Versions
Caldera Unixware	Version 7.1.1
Caldera Unixware	Version 7.1_.0
Caldera Unixware	Version 7
Sgi Irix	Version 5.2
Sgi Irix	Version 5.3
Sgi Irix	Version 6.0.1
Sgi Irix	Version 6.0
Sgi Irix	Version 6.1
Sgi Irix	Version 6.2
Sgi Irix	Version 6.3
Sgi Irix	Version 6.4
Sgi Irix	Version 6.5.10
Sgi Irix	Version 6.5.11
Sgi Irix	Version 6.5.12
Sgi Irix	Version 6.5.13
Sgi Irix	Version 6.5.14
Sgi Irix	Version 6.5.15
Sgi Irix	Version 6.5.16
Sgi Irix	Version 6.5.1
Sgi Irix	Version 6.5.2
Sgi Irix	Version 6.5.3
Sgi Irix	Version 6.5.4
Sgi Irix	Version 6.5.5
Sgi Irix	Version 6.5.6
Sgi Irix	Version 6.5.7
Sgi Irix	Version 6.5.8
Sgi Irix	Version 6.5.9
Sgi Irix	Version 6.5
Xi Graphics Dextop	Version 2.1

Configuration B

17 vulnerable

Vulnerable Software	Affected Versions
Caldera Openunix	Version 8.0
Compaq Tru64	Version 4.0f
Compaq Tru64	Version 4.0g
Compaq Tru64	Version 5.0a
Compaq Tru64	Version 5.1
Compaq Tru64	Version 5.1a
Hp Hp Ux	Version 10.10
Hp Hp Ux	Version 10.20
Hp Hp Ux	Version 10.24
Hp Hp Ux	Version 11.00
Hp Hp Ux	Version 11.11
Ibm Aix	Version 4.3.3
Ibm Aix	Version 5.1
Sun Solaris	Version 2.6
Sun Sunos	Version 5.5.1
Sun Sunos	Version 5.7
Sun Sunos	Version 5.8