CVE-2004-0368

KRITISCH 10.0CVE-2004-0368 · Published 04/05/2004 · updated 16/06/2026

Package	Affected versions	Patched versions
cde common desktop environment open_group	`= 1.0.1= 1.0.2= 1.1= 1.2= 2.0= 2.1= 2.1.20`	No fix yet
dextop xi_graphics	`= 2.1= 3.0`	No fix yet

Description

Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to execute arbitrary code via a crafted XDMCP packet.

References

patches.sgi.com/support/free/security/advisories/20040801-01-P
archives.neohapsis.com/archives/vulnwatch/2004-q1/0064.html · Vendor Advisory
lists.immunitysec.com/pipermail/dailydave/2004-March/000402.html · Vendor Advisory
secunia.com/advisories/11210 · Vendor Advisory
secunia.com/advisories/11214 · Vendor Advisory
secunia.com/advisories/11495 · Vendor Advisory
secunia.com/advisories/11614 · Vendor Advisory
sunsolve.sun.com/search/document.do
sunsolve.sun.com/search/document.do
auscert.org.au/render.html
ciac.org/ciac/bulletins/o-129.shtml
immunitysec.com/downloads/dtlogin.sxw.pdf
kb.cert.org/vuls/id/179804 · Third Party Advisory
securityfocus.com/bid/9958
exchange.xforce.ibmcloud.com/vulnerabilities/15581
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1436

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free