|
Multiple CDE Vendor ToolTalk Database Server Format String Vulnerability
CDE ships with a daemon called the ToolTalk database server, which allows programs designed for use in CDE to communicate with each other. The server is enabled by default on most systems shipped with CDE. ToolTalk database server contains a remotely exploitable format-string vulnerability. Remote attackers may be able to cause a denial of service or gain root access on the target host. |
|
|
Privacy Statement |