CVE-2001-0803

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remote attackers to execute arbitrary commands.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://ftp.support.compaq.com/patches/.new/html/SSRT-541.shtml
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/214
http://www.cert.org/advisories/CA-2001-31.htmlUS Government Resource
http://www.cert.org/advisories/CA-2002-01.htmlUS Government Resource
http://www.kb.cert.org/vuls/id/172583Patch, Third Party Advisory, US Government Resource
http://www.securityfocus.com/advisories/3651Patch, Vendor Advisory
http://www.securityfocus.com/bid/3517Patch, Vendor Advisory
http://xforce.iss.net/alerts/advise101.phpVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7396
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A70
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A74
http://ftp.support.compaq.com/patches/.new/html/SSRT-541.shtml
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/214
http://www.cert.org/advisories/CA-2001-31.htmlUS Government Resource
http://www.cert.org/advisories/CA-2002-01.htmlUS Government Resource
http://www.kb.cert.org/vuls/id/172583Patch, Third Party Advisory, US Government Resource
http://www.securityfocus.com/advisories/3651Patch, Vendor Advisory
http://www.securityfocus.com/bid/3517Patch, Vendor Advisory
http://xforce.iss.net/alerts/advise101.phpVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7396
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A70
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A74

Timeline

Published: Dec 6, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-08045.0Directory traversal vulnerability in story.pl in Interactive Story 1.3 allows a remote attacker to read arbitrary files via a .. (dot dot) a CVE-2001-08055.0Directory traversal vulnerability in ttawebtop.cgi in Tarantella Enterprise 3.00 and 3.01 allows remote attackers to read arbitrary files vi CVE-2001-08063.6Apple MacOS X 10.0 and 10.1 allow a local user to read and write to a user's desktop folder via insecure default permissions for the Desktop CVE-2001-08072.6Internet Explorer 5.0, and possibly other versions, may allow remote attackers (malicious web pages) to read known text files from a client'CVE-2001-080810.0gnatsweb.pl in GNATS GnatsWeb 2.7 through 3.95 allows remote attackers to execute arbitrary commands via certain characters in the help_file CVE-2001-08092.1Vulnerability in CIFS/9000 Server (SAMBA) A.01.06 and earlier in HP-UX 11.0 and 11.11, when configured as a print server, allows local users CVE-2001-08157.5Buffer overflow in PerlIS.dll in Activestate ActivePerl 5.6.1.629 and earlier allows remote attackers to execute arbitrary code via an HTTP CVE-2001-08167.5OpenSSH before 2.9.9, when running sftp using sftp-server and using restricted keypairs, allows remote authenticated users to bypass authori CVE-2001-081710.0Vulnerability in HP-UX line printer daemon (rlpdaemon) in HP-UX 10.01 through 11.11 allows remote attackers to modify arbitrary files and ga CVE-2001-08187.5A buffer overflow the '\s' console command in MDBMS 0.99b9 and earlier allows remote attackers to execute arbitrary commands by sending the CVE-2001-08197.5A buffer overflow in Linux fetchmail before 5.8.6 allows remote attackers to execute arbitrary code via a large 'To:' field in an email head CVE-2001-08207.5Buffer overflows in GazTek ghttpd 1.4 allows a remote attacker to execute arbitrary code via long arguments that are passed to (1) the Log f