Unscored severity · published Dec 6, 2001
CVE-2001-0803
Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remote attackers to execute arbitrary commands
–
CVSS
85.6%
EPSS
No
On KEV
Description
Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remote attackers to execute arbitrary commands.
Exploitation
Is it being used?
Exploit prediction (EPSS)85.6% · higher than 100% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CC
Cde Common Desktop Environment · Open Group
1.0.1; 1.0.2; 1.1; 1.2; 2.0; 2.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-0803
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-0803
ftp.support.compaq.com
http://ftp.support.compaq.com/patches/.new/html/SSRT-541.shtml
sunsolve.sun.com
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/214
US Government Resource
http://www.cert.org/advisories/CA-2001-31.html
US Government Resource
http://www.cert.org/advisories/CA-2002-01.html
More from Cde Common Desktop Environment
–
CVE-2004-0368
Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to execute arbitrary code via a crafted XDMCP packet