[eddie5659]

Hiya

Two vulnerabilities have been discovered in the Common Desktop Environment (CDE) ToolTalk RPC database server. The first vulnerability could be used by a remote attacker to delete arbitrary files, cause a denial of service, or possibly execute arbitrary code or commands. The second vulnerability could allow a local attacker to overwrite arbitrary files with contents of the attacker's choice.

Systems Affected

Systems running CDE ToolTalk



Caldera, Inc.
Compaq Computer Corporation
Cray, Inc
Fujitsu
Hewlett-Packard Company
IBM Corporation
SGI
Sun Microsystems, Inc
Xi Graphics

http://www.cert.org/advisories/CA-2002-20.html

Regards

eddie