Linux - Open Source White Papers
Common Desktop Environment (CDE) dtspcd Buffer Overflow on UNIX and Linux OSs (Symantec)
Overview
Risk: HIGH
Description: Symantec Corporation advises its customers to be aware of a remote root-access buffer overflow vulnerability in the Common Desktop Environment's (CDE's) desktop subprocess control service(dtspc). A remote intruder can cause arbitrary code to be run with root-level privileges on the targeted system, potentially gaining root access to the system.
The CDE is an integrated graphical user interface that runs on Unix and Linux operating systems. "dtspcd" is a network daemon that accepts requests from clients to execute commands and launch applications remotely. On systems running CDE, dtspcd is spawned by the Internet services daemon (typically inetd or xinetd) in response to a CDE client request. The dtspcd is typically configured to run on port 6112/tcp with root privileges. dtspcd makes a function call to a shared library that contains a buffer overflow condition in the client connection routine. The buffer overflow can be exploited by a specially crafted CDE client request allowing a remote attacker to gain administrative privileges on the affected host.
Click thru to alert text for information on protecting against this intrusion.
| Publisher | Symantec | File Format | HTML |
|---|---|---|---|
| Date Published | January 2002 | Downloads | 9 |
| Format | White Papers | ||
| Topics | |||
-
Did you find this white paper useful? 0 out of 1 users found this white paper useful
White Paper RSS
Download
Register
