CVE-2002-0678

CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC procedure.

• ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.28/CSSA-2002-SCO.28.txt
• ftp://patches.sgi.com/support/free/security/advisories/20021101-01-P
• http://archives.neohapsis.com/archives/aix/2002-q3/0002.html
• http://marc.info/?l=bugtraq&m=102635906423617&w=2
• http://www.cert.org/advisories/CA-2002-20.htmlPatch, Third Party Advisory, US Government Resource
• http://www.iss.net/security_center/static/9527.php
• http://www.kb.cert.org/vuls/id/299816Patch, Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/5083
• http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0207-199
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A175
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2770
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A80
• ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.28/CSSA-2002-SCO.28.txt
• ftp://patches.sgi.com/support/free/security/advisories/20021101-01-P
• http://archives.neohapsis.com/archives/aix/2002-q3/0002.html
• http://marc.info/?l=bugtraq&m=102635906423617&w=2
• http://www.cert.org/advisories/CA-2002-20.htmlPatch, Third Party Advisory, US Government Resource
• http://www.iss.net/security_center/static/9527.php
• http://www.kb.cert.org/vuls/id/299816Patch, Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/5083
• http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0207-199
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A175
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2770
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A80

Published

Jul 23, 2002

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2002-0672Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through …
• CVE-2002-0673The enrollment process for Pingtel xpressa SIP-based voice-o…
• CVE-2002-0674Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through …
• CVE-2002-0675Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through …
• CVE-2002-0676SoftwareUpdate for MacOS 10.1.x does not use authentication …
• CVE-2002-0677CDE ToolTalk database server (ttdbserver) allows remote atta…
• CVE-2002-0679Buffer overflow in Common Desktop Environment (CDE) ToolTalk…
• CVE-2002-0680Directory traversal vulnerability in GoAhead Web Server 2.1 …
• CVE-2002-0681Cross-site scripting vulnerability in GoAhead Web Server 2.1…
• CVE-2002-0682Cross-site scripting vulnerability in Apache Tomcat 4.0.3 al…
• CVE-2002-0683Directory traversal vulnerability in Carello 1.3 allows remo…
• CVE-2002-0684Buffer overflow in DNS resolver functions that perform looku…