CVE-2004-0368
Critical
Description
Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to execute arbitrary code via a crafted XDMCP packet.
SeverityCritical
CVSS10.0
Exploit probability96. percentile10.1%
Product
Open Group Cde Common Desktop Environment
PublishedMay 4, 2004
First seenMay 4, 2004
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| open_group cde_common_desktop_environment | 1.0.1, 1.0.2, 1.1, 1.2, 2.0, 2.1, 2.1.20 | — |
| xi_graphics dextop | 2.1, 3.0 | — |
| ibm aix | 4.3.3, 5.1, 5.2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.