PT-2002-1568 · X11+2 · Xterm+4

Publicado 2002-06-11 · Atualizado 2008-09-05 · CVE-2002-0517

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions libX11 on Caldera Open UNIX 8.0.0 libX11 on UnixWare 7.1.1

Description A buffer overflow issue in the X11 library allows local users to gain root privileges by providing a long -xrm argument to certain programs. This can be exploited through programs such as dtterm or xterm.

Recommendations For libX11 on Caldera Open UNIX 8.0.0, consider restricting access to the dtterm and xterm programs until a fix is available. For libX11 on UnixWare 7.1.1, avoid using the -xrm argument in dtterm and xterm to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2002-0517

Produtos afetados

Caldera Open Unix

Unixware

Dtterm

Libx11

Xterm

Referências · 8

• http://archives.neohapsis.com/archives/bugtraq/2002-01/0099.html · Nota
• ftp://stage.caldera.com/pub/security/openunix/CSSA-2002-SCO.15/CSSA-2002-SCO.15.txt · Aviso do Fabricante
• http://iss.net/security_center/static/7282.php · Aviso do Fabricante
• http://kb.cert.org/vuls/id/169059 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0517 · Nota de Segurança
• http://iss.net/security_center/static/8828.php · Nota
• http://securityfocus.com/archive/1/249106 · Aviso do Fabricante
• http://securityfocus.com/bid/4502 · Aviso do Fabricante