dextop vulnerabilities and fixes
Recent CVEs affecting dextop, with upgrade or downgrade steps. 4 tracked.
dextop has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2004-05-04. Highest priority: CVE-2004-0368 (score 59/100).
- CVE-2004-0368 HIGH 10.0 DOWNGRADE DOWNGRADE Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attac
- CVE-2002-0679 HIGH 10.0 DOWNGRADE DOWNGRADE Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remo
- CVE-2002-0678 HIGH 7.2 DOWNGRADE DOWNGRADE CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack
- CVE-2002-0677 HIGH 7.5 DOWNGRADE DOWNGRADE CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with
FAQ
How do I fix dextop vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is dextop being exploited right now?
None of the tracked dextop CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which dextop CVE should I patch first?
CVE-2004-0368 currently ranks highest (59/100): Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attac.