CVE-2004-0368

Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to execute arbitrary code via a crafted XDMCP packet.

• CWE-119

• ftp://patches.sgi.com/support/free/security/advisories/20040801-01-P
• http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0064.htmlVendor Advisory
• http://lists.immunitysec.com/pipermail/dailydave/2004-March/000402.htmlVendor Advisory
• http://secunia.com/advisories/11210/Vendor Advisory
• http://secunia.com/advisories/11214/Vendor Advisory
• http://secunia.com/advisories/11495/Vendor Advisory
• http://secunia.com/advisories/11614/Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-101478-1
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-57539-1&searchclause=security
• http://www.auscert.org.au/render.html?it=4103&cid=3734
• http://www.ciac.org/ciac/bulletins/o-129.shtml
• http://www.immunitysec.com/downloads/dtlogin.sxw.pdf
• http://www.kb.cert.org/vuls/id/179804Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/9958
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15581
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1436
• ftp://patches.sgi.com/support/free/security/advisories/20040801-01-P
• http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0064.htmlVendor Advisory
• http://lists.immunitysec.com/pipermail/dailydave/2004-March/000402.htmlVendor Advisory
• http://secunia.com/advisories/11210/Vendor Advisory
• http://secunia.com/advisories/11214/Vendor Advisory
• http://secunia.com/advisories/11495/Vendor Advisory
• http://secunia.com/advisories/11614/Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-101478-1
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-57539-1&searchclause=security
• http://www.auscert.org.au/render.html?it=4103&cid=3734
• http://www.ciac.org/ciac/bulletins/o-129.shtml
• http://www.immunitysec.com/downloads/dtlogin.sxw.pdf
• http://www.kb.cert.org/vuls/id/179804Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/9958
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15581
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1436

Published

May 4, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-0362Multiple stack-based buffer overflows in the ICQ parsing rou…
• CVE-2004-0363Stack-based buffer overflow in the SymSpamHelper ActiveX com…
• CVE-2004-0364The WrapNISUM ActiveX component (WrapUM.dll) in Norton Inter…
• CVE-2004-0365The dissect_attribute_value_pairs function in packet-radius.…7.5
• CVE-2004-0366SQL injection vulnerability in the libpam-pgsql library befo…
• CVE-2004-0367Ethereal 0.10.1 to 0.10.2 allows remote attackers to cause a…
• CVE-2004-0369Buffer overflow in Entrust LibKmp ISAKMP library, as used by…
• CVE-2004-0370The setsockopt call in the KAME Project IPv6 implementation,…
• CVE-2004-0371Heimdal 0.6.x before 0.6.1 and 0.5.x before 0.5.3 does not p…
• CVE-2004-0372xine allows local users to overwrite arbitrary files via a s…
• CVE-2004-0374Interchange before 5.0.1 allows remote attackers to "expose …
• CVE-2004-0375SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 20…