PT-2002-1568 · X11+2 · Xterm+4

Published 2002-06-11 · Updated 2008-09-05 · CVE-2002-0517

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions libX11 on Caldera Open UNIX 8.0.0 libX11 on UnixWare 7.1.1

Description A buffer overflow issue in the X11 library allows local users to gain root privileges by providing a long -xrm argument to certain programs. This can be exploited through programs such as dtterm or xterm.

Recommendations For libX11 on Caldera Open UNIX 8.0.0, consider restricting access to the dtterm and xterm programs until a fix is available. For libX11 on UnixWare 7.1.1, avoid using the -xrm argument in dtterm and xterm to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2002-0517

Affected Products

Caldera Open Unix

Unixware

Dtterm

Libx11

Xterm

References · 8

• ftp://stage.caldera.com/pub/security/openunix/CSSA-2002-SCO.15/CSSA-2002-SCO.15.txt · Vendor Advisory
• http://iss.net/security_center/static/7282.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0517 · Security Note
• http://securityfocus.com/archive/1/249106 · Vendor Advisory
• http://securityfocus.com/bid/4502 · Vendor Advisory
• http://archives.neohapsis.com/archives/bugtraq/2002-01/0099.html · Note
• http://kb.cert.org/vuls/id/169059 · Note
• http://iss.net/security_center/static/8828.php · Note