Vulnerabilities > CVE-1999-0003

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

COMPLETE

Integrity impact

COMPLETE

Availability impact

COMPLETE

network

low complexity

critical

nessus

exploit available

NVD

Published: 1998-04-01

Updated: 2018-10-30

Summary

Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd).

Part	Description	Count
Application	Tritreal Tritreal TED CDE 4.3	1
OS	Sgi SGI Irix 5.2 SGI Irix 5.3 SGI Irix 6.0 SGI Irix 6.1 SGI Irix 6.2 SGI Irix 6.3 SGI Irix 6.4	7
OS	Hp HP HP UX 10.01 HP HP UX 10.02 HP HP UX 10.03 HP HP UX 11.00	4
OS	Ibm IBM AIX 4.1 IBM AIX 4.1.1 IBM AIX 4.1.2 IBM AIX 4.1.3 IBM AIX 4.1.4 IBM AIX 4.1.5 IBM AIX 4.2 IBM AIX 4.2.1 IBM AIX 4.3	9
OS	Sun SUN Solaris 2.6 SUN Sunos - SUN Sunos 4.1.3 SUN Sunos 5.0 SUN Sunos 5.1 SUN Sunos 5.2 SUN Sunos 5.3 SUN Sunos 5.4 SUN Sunos 5.5 SUN Sunos 5.5.1	10

description	Xi Graphics Maximum CDE 1.2.3,TriTeal TED CDE 4.3,Sun Solaris 2.5.1 ToolTalk RPC Service Overflow Vulnerability (2). CVE-1999-0003. Remote exploit for unix p...
id	EDB-ID:19102
last seen	2016-02-02
modified	1998-08-31
published	1998-08-31
reporter	NAI research team
source	https://www.exploit-db.com/download/19102/
title	Xi Graphics Maximum CDE 1.2.3 & TriTeal TED CDE 4.3 & Sun Solaris <= 2.5.1 - ToolTalk RPC Service Overflow Vulnerability 2

description	Xi Graphics Maximum CDE 1.2.3,TriTeal TED CDE 4.3,Sun Solaris 2.5.1 ToolTalk RPC Service Overflow Vulnerability (1). CVE-1999-0003. Remote exploit for unix p...
id	EDB-ID:19101
last seen	2016-02-02
modified	1998-08-31
published	1998-08-31
reporter	NAI research team
source	https://www.exploit-db.com/download/19101/
title	Xi Graphics Maximum CDE 1.2.3 & TriTeal TED CDE 4.3 & Sun Solaris <= 2.5.1 - ToolTalk RPC Service Overflow Vulnerability 1

NASL family	RPC
NASL id	RPC_TOOLTALK.NASL
description	The tooltalk RPC service is running. A possible implementation fault in the ToolTalk object database server may allow an attacker to execute arbitrary commands as root. * This warning may be a false positive since the presence of this * vulnerability is only accurately identified with local access.
last seen	2020-06-01
modified	2020-06-02
plugin id	10239
published	1999-08-22
reporter	This script is Copyright (C) 1999-2018 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/10239
title	CDE RPC tooltalk Service Multiple Overflows