Unscored CVE-2002-0678 EUVD-2002-0672GHSA-mjg7-rq8m-c73g

CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file …

Published Apr 2, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC procedure.

References

CA-2002-20 third-party-advisory
20020710 [CORE-20020528] Multiple vulnerabilities in ToolTalk Database server mailing-list
HPSBUX0207-199 vendor-advisory
IY32368 vendor-advisory
VU#299816 third-party-advisory
oval:org.mitre.oval:def:175 vdb-entry signature
oval:org.mitre.oval:def:80 vdb-entry signature
5083 vdb-entry
tooltalk-ttdbserverd-tttransaction-symlink(9527) vdb-entry
oval:org.mitre.oval:def:2770 vdb-entry signature