CVE-2004-0368 – SCOSA-2005.18.txt

https://notcve.org/view.php?id=CVE-2004-0368

25 Mar 2004 — Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to execute arbitrary code via a crafted XDMCP packet. Vulnerabilidad de doble liberación de memora en dtlogin de CDE sobre Solaris, y posiblemente otros sistemas operativos, permite a atacantes remotos ejecutar código arbitrario mediante cierto paquete UDP. The CDE dtlogin utility has a double-free vulnerability in the X Display Manager Control Protocol (XDMCP). By sending a specially-crafted X... • ftp://patches.sgi.com/support/free/security/advisories/20040801-01-P • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •