github - ghsa-p2mw-q26f-vf87

ghsa-p2mw-q26f-vf87

Vulnerability from github

Published

2022-05-03 03:07

Modified

2022-05-03 03:07

Details

Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remote attackers to execute arbitrary commands.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2001-0803"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-119"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2001-12-06T05:00:00Z",
    "severity": "HIGH"
  },
  "details": "Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remote attackers to execute arbitrary commands.",
  "id": "GHSA-p2mw-q26f-vf87",
  "modified": "2022-05-03T03:07:11Z",
  "published": "2022-05-03T03:07:11Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2001-0803"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/7396"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A70"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A74"
    },
    {
      "type": "WEB",
      "url": "http://ftp.support.compaq.com/patches/.new/html/SSRT-541.shtml"
    },
    {
      "type": "WEB",
      "url": "http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll\u0026doc=secbull/214"
    },
    {
      "type": "WEB",
      "url": "http://www.cert.org/advisories/CA-2001-31.html"
    },
    {
      "type": "WEB",
      "url": "http://www.cert.org/advisories/CA-2002-01.html"
    },
    {
      "type": "WEB",
      "url": "http://www.kb.cert.org/vuls/id/172583"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/advisories/3651"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/3517"
    },
    {
      "type": "WEB",
      "url": "http://xforce.iss.net/alerts/advise101.php"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

cve-2001-0803

Vulnerability from cvelistv5

Published

2002-03-09 05:00

Modified

2024-08-08 04:37

Severity ?

Summary

Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remote attackers to execute arbitrary commands.

References

▼	URL	Tags
	http://ftp.support.compaq.com/patches/.new/html/SSRT-541.shtml	vendor-advisory, x_refsource_COMPAQ
	ftp://patches.sgi.com/support/free/security/advisories/20011107-01-P	vendor-advisory, x_refsource_SGI
	http://www.securityfocus.com/bid/3517	vdb-entry, x_refsource_BID
	http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/214	vendor-advisory, x_refsource_SUN
	ftp://stage.caldera.com/pub/security/openunix/CSSA-2001-SCO.30/	vendor-advisory, x_refsource_CALDERA
	http://www.cert.org/advisories/CA-2002-01.html	third-party-advisory, x_refsource_CERT
	http://www.kb.cert.org/vuls/id/172583	third-party-advisory, x_refsource_CERT-VN
	https://exchange.xforce.ibmcloud.com/vulnerabilities/7396	vdb-entry, x_refsource_XF
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A70	vdb-entry, signature, x_refsource_OVAL
	http://www.cert.org/advisories/CA-2001-31.html	third-party-advisory, x_refsource_CERT
	http://www.securityfocus.com/advisories/3651	vendor-advisory, x_refsource_HP
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A74	vdb-entry, signature, x_refsource_OVAL
	http://xforce.iss.net/alerts/advise101.php	third-party-advisory, x_refsource_ISS

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T04:37:05.842Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SSRT541",
            "tags": [
              "vendor-advisory",
              "x_refsource_COMPAQ",
              "x_transferred"
            ],
            "url": "http://ftp.support.compaq.com/patches/.new/html/SSRT-541.shtml"
          },
          {
            "name": "20011107-01-P",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20011107-01-P"
          },
          {
            "name": "3517",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/3517"
          },
          {
            "name": "00214",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUN",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll\u0026doc=secbull/214"
          },
          {
            "name": "CSSA-2001-SCO.30",
            "tags": [
              "vendor-advisory",
              "x_refsource_CALDERA",
              "x_transferred"
            ],
            "url": "ftp://stage.caldera.com/pub/security/openunix/CSSA-2001-SCO.30/"
          },
          {
            "name": "CA-2002-01",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.cert.org/advisories/CA-2002-01.html"
          },
          {
            "name": "VU#172583",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/172583"
          },
          {
            "name": "cde-dtspcd-bo(7396)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/7396"
          },
          {
            "name": "oval:org.mitre.oval:def:70",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A70"
          },
          {
            "name": "CA-2001-31",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.cert.org/advisories/CA-2001-31.html"
          },
          {
            "name": "HPSBUX0111-175",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/advisories/3651"
          },
          {
            "name": "oval:org.mitre.oval:def:74",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A74"
          },
          {
            "name": "20011112 Multi-Vendor Buffer Overflow Vulnerability in CDE Subprocess Control Service",
            "tags": [
              "third-party-advisory",
              "x_refsource_ISS",
              "x_transferred"
            ],
            "url": "http://xforce.iss.net/alerts/advise101.php"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2001-11-12T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remote attackers to execute arbitrary commands."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2002-02-26T00:00:00",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SSRT541",
          "tags": [
            "vendor-advisory",
            "x_refsource_COMPAQ"
          ],
          "url": "http://ftp.support.compaq.com/patches/.new/html/SSRT-541.shtml"
        },
        {
          "name": "20011107-01-P",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20011107-01-P"
        },
        {
          "name": "3517",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/3517"
        },
        {
          "name": "00214",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUN"
          ],
          "url": "http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll\u0026doc=secbull/214"
        },
        {
          "name": "CSSA-2001-SCO.30",
          "tags": [
            "vendor-advisory",
            "x_refsource_CALDERA"
          ],
          "url": "ftp://stage.caldera.com/pub/security/openunix/CSSA-2001-SCO.30/"
        },
        {
          "name": "CA-2002-01",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.cert.org/advisories/CA-2002-01.html"
        },
        {
          "name": "VU#172583",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/172583"
        },
        {
          "name": "cde-dtspcd-bo(7396)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/7396"
        },
        {
          "name": "oval:org.mitre.oval:def:70",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A70"
        },
        {
          "name": "CA-2001-31",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.cert.org/advisories/CA-2001-31.html"
        },
        {
          "name": "HPSBUX0111-175",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://www.securityfocus.com/advisories/3651"
        },
        {
          "name": "oval:org.mitre.oval:def:74",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A74"
        },
        {
          "name": "20011112 Multi-Vendor Buffer Overflow Vulnerability in CDE Subprocess Control Service",
          "tags": [
            "third-party-advisory",
            "x_refsource_ISS"
          ],
          "url": "http://xforce.iss.net/alerts/advise101.php"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2001-0803",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remote attackers to execute arbitrary commands."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SSRT541",
              "refsource": "COMPAQ",
              "url": "http://ftp.support.compaq.com/patches/.new/html/SSRT-541.shtml"
            },
            {
              "name": "20011107-01-P",
              "refsource": "SGI",
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20011107-01-P"
            },
            {
              "name": "3517",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/3517"
            },
            {
              "name": "00214",
              "refsource": "SUN",
              "url": "http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll\u0026doc=secbull/214"
            },
            {
              "name": "CSSA-2001-SCO.30",
              "refsource": "CALDERA",
              "url": "ftp://stage.caldera.com/pub/security/openunix/CSSA-2001-SCO.30/"
            },
            {
              "name": "CA-2002-01",
              "refsource": "CERT",
              "url": "http://www.cert.org/advisories/CA-2002-01.html"
            },
            {
              "name": "VU#172583",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/172583"
            },
            {
              "name": "cde-dtspcd-bo(7396)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/7396"
            },
            {
              "name": "oval:org.mitre.oval:def:70",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A70"
            },
            {
              "name": "CA-2001-31",
              "refsource": "CERT",
              "url": "http://www.cert.org/advisories/CA-2001-31.html"
            },
            {
              "name": "HPSBUX0111-175",
              "refsource": "HP",
              "url": "http://www.securityfocus.com/advisories/3651"
            },
            {
              "name": "oval:org.mitre.oval:def:74",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A74"
            },
            {
              "name": "20011112 Multi-Vendor Buffer Overflow Vulnerability in CDE Subprocess Control Service",
              "refsource": "ISS",
              "url": "http://xforce.iss.net/alerts/advise101.php"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2001-0803",
    "datePublished": "2002-03-09T05:00:00",
    "dateReserved": "2001-10-29T00:00:00",
    "dateUpdated": "2024-08-08T04:37:05.842Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted