CVE-2004-0368 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2004-0368
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2004-0368

Description: Double-free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to execute arbitrary code via a crafted XDMCP packet.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/15581 VULNWATCH http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0064.html SUNALERT http://sunsolve.sun.com/search/document.do?assetkey=1-26-101478-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-57539-1&searchclause=security SGI SAID Secunia Advisory: SA11495 Secunia Advisory: SA11214 Secunia Advisory: SA11614 Secunia Advisory: SA11210 OVAL http://oval.mitre.org/oval/definitions/data/oval1436.html MLIST http://lists.immunitysec.com/pipermail/dailydave/2004-March/000402.html MISC http://www.immunitysec.com/downloads/dtlogin.sxw.pdf HP http://www.auscert.org.au/render.html?it=4103&cid=3734 CIAC http://www.ciac.org/ciac/bulletins/o-129.shtml CERT-VN 179804 BID 9958

Return to the previous page.