2 results (0.003 seconds)

CVSS: 9.8EPSS: 23%CPEs: 46EXPL: 0

12 Jul 2002 — CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument in an AUTH_UNIX procedure call, which is used as a table index by the _TT_ISCLOSE procedure. El sevidor de bases de datos CDE ToolTalk (ttdbserver) permite a atacantes remotos sobrescribir posiciones arbitrarias de memoria con ceros, y posiblemente ganar privilegios, mediante un arguemnte de descriptor de fichero en una llamada al... • ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.28/CSSA-2002-SCO.28.txt •

CVSS: 7.2EPSS: 0%CPEs: 8EXPL: 1

04 Dec 1999 — UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack. • https://www.exploit-db.com/exploits/19661 •