Multiple Vendor CDE dtspcd Vulnerability

Bugtraq ID:	636
Class:	Origin Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	Sep 13 1999 12:00AM
Updated:	Sep 13 1999 12:00AM
Credit:	This vulnerability was discovered and posted to the Bugtraq mailing list by Job de Haas of ITSX (Information Technology Security eXperts) on Mon Sep 13 1999 .
Vulnerable:	Sun Solaris 2.5.1 _x86 Sun Solaris 2.5.1 Sun Solaris 7.0_x86 Sun Solaris 7.0 Sun Solaris 2.6_x86 Sun Solaris 2.6 Sun Solaris 2.5_x86 Sun Solaris 2.5 Open Group CDE Common Desktop Environment 2.1 20 Open Group CDE Common Desktop Environment 2.1 + Sun Solaris 9_x86 Update 2 + Sun Solaris 9_x86 + Sun Solaris 9 Open Group CDE Common Desktop Environment 2.0 Open Group CDE Common Desktop Environment 1.2 Open Group CDE Common Desktop Environment 1.1 Open Group CDE Common Desktop Environment 1.0.2 Open Group CDE Common Desktop Environment 1.0.1
Not Vulnerable:

Multiple Vendor CDE dtspcd Vulnerability

Solution:
Updated SGI advisory (20021102-02-P) and fix details available.

Sun Micosystems
------------------------

CDE version Patch ID
___________ _________

1.3 sparc 108221-01
1.3 x86 108222-01
1.2 sparc 108199-01
1.2_x86 x86 108200-01
1.0. sparc 108205-01
1.0.2 x86 108206-01
1.0.1 sparc 108252-01
1.0.1 x86 108253-01

Patches are available for all Sun customers at http://sunsolve.sun.com.


Sun Solaris 2.6

• Sun 108199-01
  

Sun Solaris 7.0

• Sun 108221-01
  

Sun Solaris 2.6_x86

• Sun 108200-01
  

Sun Solaris 2.5

• Sun 108252-01
  

Sun Solaris 7.0_x86

• Sun 108222-01
  

Sun Solaris 2.5_x86

• Sun 108253-01
  

Sun Solaris 2.5.1 _x86

• Sun 108206-01
  

Sun Solaris 2.5.1

• Sun 108205-01