PT-2003-1901 · Cde · Cde Libdthelp Library

Kevin Kotas · Published 2003-11-06 · Updated 2018-05-03 · CVE-2003-0834

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CDE libDtHelp library (affected versions not specified)

Description A buffer overflow issue exists in the CDE libDtHelp library, allowing local users to execute arbitrary code. This can be achieved through various means, including modifying the DTHELPUSERSEARCHPATH environment variable and utilizing the Help feature, altering the DTSEARCHPATH, or modifying the LOGNAME.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2003-0834

Affected Products

Cde Libdthelp Library

References · 10

• 🔥 https://exploit-db.com/exploits/713 · Exploit
• 🔥 https://exploit-db.com/exploits/714 · Exploit
• http://securityfocus.com/bid/8973 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-0834 · Security Note
• ftp://patches.sgi.com/support/free/security/advisories/20040801-01-P · Vendor Advisory
• http://kb.cert.org/vuls/id/575804 · Patch
• http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57414 · Vendor Advisory
• http://archives.neohapsis.com/archives/hp/2003-q4/0047.html · Vendor Advisory
• http://idefense.com/application/poi/display?id=134&type=vulnerabilities&flashstatus=false · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5141 · Note