Oval Definition:
oval:org.mitre.oval:def:74
Revision Date
:
2010-09-20
Version
:
18
Title
:
Solaris 7 CDE dtspcd Buffer Overflow
Description
:
Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remote attackers to execute arbitrary commands.
Family
:
unix
Class
:
vulnerability
Status
:
ACCEPTED
Reference(s)
:
CVE-2001-0803
Platform(s)
:
Sun Solaris 7
Product(s)
:
dtspcd
Definition Synopsis
Software section
Solaris 7 Installed
AND
File dtspcd exists
AND
NOT
Patch 106934-04 or later installed
AND
Configuration section
inetd.conf contains dtspcd
AND
inetd running
AND
File dtspcd executable
File dtspcd executable
OR
File dtspcd executable
OR
File dtspcd executable
BACK