| Package | Affected versions | Patched versions |
|---|---|---|
| unixware | = 7= 7.1.1= 7.1_.0 | |
| dextop | = 2.1 |
CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument in an AUTH_UNIX procedure call, which is used as a table index by the _TT_ISCLOSE procedure.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free