CERT Advisory: Multiple Vulnerabilities in CDE ToolTalk

“Two vulnerabilities have been discovered in the Common Desktop
Environment (CDE) ToolTalk RPC database server. The first
vulnerability could be used by a remote attacker to delete
arbitrary files, cause a denial of service, or possibly execute
arbitrary code or commands. The second vulnerability could allow a
local attacker to overwrite arbitrary files with contents of the
attacker’s choice…”

Complete
Story