Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9
Exploited now
Cde records in CISA KEVNo Cde vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 37
The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02219 · Published 2000-01-04 · No fix listed
Priority LOW 34
Unauthorized privileged access or denial of service via dtappgather program in CDE.
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.01223 · Published 1999-09-29 · No fix listed
Priority LOW 33
Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name.
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00836 · Published 2000-01-04 · No fix listed
Priority LOW 33
The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack.
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00834 · Published 2000-01-04 · No fix listed
Priority LOW 33
Buffer overflow in AIX dtterm program for the CDE.
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.008 · Published 1999-09-29 · No fix listed
Priority LOW 32
The dtlogin program in Compaq Tru64 UNIX allows local users to gain root privileges.
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00345 · Published 2000-01-04 · No fix listed
Priority LOW 32
HP CDE program includes the current directory in root's PATH variable.
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00542 · Published 2000-01-04 · No fix listed
THREATIST.IORead the docs