Format string vulnerability in CDE Mailer (dtmail) on Solaris 8 and 9 allows local users to gain privileges via format strings in the argv[0] value.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Call_management_system_server | Avaya | 9.0 (including) | 9.0 (including) |
| Call_management_system_server | Avaya | 11.0 (including) | 11.0 (including) |
| Call_management_system_server | Avaya | 12.0 (including) | 12.0 (including) |
| Dtmail | Sun | * | * |