CVE-2001-0717 | Vulnerability Database | Aqua Security

Format string vulnerability in ToolTalk database server rpc.ttdbserverd allows remote attackers to execute arbitrary commands via format string specifiers that are passed to the syslog function.

Affected Software

Name	Vendor	Start Version	End Version
Tooltalk_database_server	Tooltalk	*	*

References

ftp://stage.caldera.com/pub/security/openunix/CSSA-2001-SCO.28/CSSA-2001-SCO.28.txt
http://ftp.support.compaq.com/patches/.new/html/SSRT0767U.shtml
http://online.securityfocus.com/advisories/3584
http://securitytracker.com/id?1002479
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll\u0026doc=secbull/212
http://www.cert.org/advisories/CA-2001-27.html
http://www.ciac.org/ciac/bulletins/m-002.shtml
http://www.securityfocus.com/bid/3382
http://xforce.iss.net/alerts/advise98.php
https://exchange.xforce.ibmcloud.com/vulnerabilities/7069
ftp://stage.caldera.com/pub/security/openunix/CSSA-2001-SCO.28/CSSA-2001-SCO.28.txt
http://ftp.support.compaq.com/patches/.new/html/SSRT0767U.shtml
http://online.securityfocus.com/advisories/3584
http://securitytracker.com/id?1002479
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll\u0026doc=secbull/212
http://www.cert.org/advisories/CA-2001-27.html
http://www.ciac.org/ciac/bulletins/m-002.shtml
http://www.securityfocus.com/bid/3382
http://xforce.iss.net/alerts/advise98.php
https://exchange.xforce.ibmcloud.com/vulnerabilities/7069

NVD	https://nvd.nist.gov/vuln/detail/CVE-2001-0717
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html