CVE-1999-0014

Description

Unauthorized privileged access or denial of service via dtappgather program in CDE.

Affected products

• cde / cde1.01 – 1.01
• cde / cde1.01_x86 – 1.01_x86
• cde / cde1.02 – 1.02
• cde / cde1.2 – 1.2
• cde / cde1.02_x86 – 1.02_x86
• cde / cde1.2_x86 – 1.2_x86
• HP / hp-ux10.10 – 10.10
• HP / hp-ux10.20 – 10.20
• HP / hp-ux11.00 – 11.00
• HP / vvos10.24 – 10.24
• ibm / aix4.1 – 4.1
• ibm / aix4.2 – 4.2
• ibm / aix4.3 – 4.3

Exploits & proofs of concept

• exploit-dbHP HP-UX 10.20/11.0 / IBM AIX 4.3 / SCO Unixware 7.0 / Sun Solaris 2.6 - Change File Permissionby Mastoras

References

• MISChttp://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9801-075
• MISChttp://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/185