<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: dextop</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2004-0368: Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attac</title><link>https://patchthecve.com/cve/CVE-2004-0368.html</link><guid>https://patchthecve.com/cve/CVE-2004-0368.html</guid><pubDate>Tue, 16 Jun 2026 22:05:30 +0000</pubDate><description>HIGH 10.0: Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to execute arbitrary code via a crafted XDMCP packet.</description></item><item><title>CVE-2002-0679: Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remo</title><link>https://patchthecve.com/cve/CVE-2002-0679.html</link><guid>https://patchthecve.com/cve/CVE-2002-0679.html</guid><pubDate>Tue, 16 Jun 2026 21:57:55 +0000</pubDate><description>HIGH 10.0: Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to execute arbitrary code via an argument to the _TT_CREATE_FILE procedure.</description></item><item><title>CVE-2002-0678: CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack</title><link>https://patchthecve.com/cve/CVE-2002-0678.html</link><guid>https://patchthecve.com/cve/CVE-2002-0678.html</guid><pubDate>Tue, 16 Jun 2026 21:57:55 +0000</pubDate><description>HIGH 7.2: CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC procedure.</description></item><item><title>CVE-2002-0677: CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with</title><link>https://patchthecve.com/cve/CVE-2002-0677.html</link><guid>https://patchthecve.com/cve/CVE-2002-0677.html</guid><pubDate>Tue, 16 Jun 2026 21:57:55 +0000</pubDate><description>HIGH 7.5: CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument in an AUTH_UNIX procedure call, which is used as a table index by the _TT_ISCLOSE procedure.</description></item></channel></rss>