high
7.2
CWE
NVD-CWE-Other
Advisory Published
CVE Published
Updated

CVE-2002-0678

First published: Tue Jul 23 2002(Updated: )

CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC procedure.

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Xinuos UnixWare=7.0
Xinuos UnixWare=7.1.0
Xinuos UnixWare=7.1.1
xi graphics dextop=2.1
SGI IRIX=5.2
SGI IRIX=5.3
SGI IRIX=6.0
SGI IRIX=6.0.1
SGI IRIX=6.1
SGI IRIX=6.2
SGI IRIX=6.3
SGI IRIX=6.4
SGI IRIX=6.5
SGI IRIX=6.5.1
SGI IRIX=6.5.2
SGI IRIX=6.5.3
SGI IRIX=6.5.4
SGI IRIX=6.5.5
SGI IRIX=6.5.6
SGI IRIX=6.5.7
SGI IRIX=6.5.8
SGI IRIX=6.5.9
SGI IRIX=6.5.10
SGI IRIX=6.5.11
SGI IRIX=6.5.12
SGI IRIX=6.5.13
SGI IRIX=6.5.14
SGI IRIX=6.5.15
SGI IRIX=6.5.16
SCO Open UNIX=8.0
HP Tru64 UNIX=4.0f
HP Tru64 UNIX=4.0g
HP Tru64 UNIX=5.0a
HP Tru64 UNIX=5.1
HP Tru64 UNIX=5.1a
HPE HP-UX=10.10
HPE HP-UX=10.20
HPE HP-UX=10.24
HPE HP-UX=11.00
HPE HP-UX=11.11
IBM AIX=4.3.3
IBM AIX=5.1
Oracle Solaris SPARC=2.6
Oracle Solaris SPARC=9.0
Sun SunOS=5.5.1
Sun SunOS=5.7
Sun SunOS=5.8

Remedy

http://www.cert.org/advisories/CA-2002-20.html

Remedy

http://www.kb.cert.org/vuls/id/299816

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the vulnerability CVE-2002-0678?

    CVE-2002-0678 allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the CDE ToolTalk database server (ttdbserver).

  • What are the affected software versions of CVE-2002-0678?

    CVE-2002-0678 affects various versions of SGI IRIX, Xinuos UnixWare, HPE HP-UX, Sun SunOS, Compaq Tru64, and IBM AIX.

  • What are common mitigation strategies for CVE-2002-0678?

    To mitigate CVE-2002-0678, it is recommended to restrict local user access and implement proper file permission controls to prevent symlink attacks.

  • How do I check if my system is vulnerable to CVE-2002-0678?

    You can check for CVE-2002-0678 vulnerability by verifying if your system is running an affected version of the CDE ToolTalk database server.

  • What is the impact of exploiting CVE-2002-0678?

    Exploiting CVE-2002-0678 can allow attackers to overwrite critical files, potentially compromising system integrity and availability.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203