CVE-2023-24039

A stack-based buffer overflow in ParseColors in libXm in Common Desktop Environment 1.6 can be exploited by local low-privileged users via the dtprintinfo setuid binary to escalate their privileges to root on Solaris 10 systems. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

• CWE-787
• CWE-787

• http://seclists.org/fulldisclosure/2023/Jan/24Mailing List, Third Party Advisory
• https://github.com/0xdea/exploits/blob/master/solaris/raptor_dtprintlibXmas.cThird Party Advisory
• https://github.com/hnsecurity/vulns/blob/main/HNS-2022-01-dtprintinfo.txtThird Party Advisory
• https://security.humanativaspa.it/nothing-new-under-the-sun/Exploit, Third Party Advisory
• http://seclists.org/fulldisclosure/2023/Jan/24Mailing List, Third Party Advisory
• https://github.com/0xdea/exploits/blob/master/solaris/raptor_dtprintlibXmas.cThird Party Advisory
• https://github.com/hnsecurity/vulns/blob/main/HNS-2022-01-dtprintinfo.txtThird Party Advisory
• https://security.humanativaspa.it/nothing-new-under-the-sun/Exploit, Third Party Advisory

Published

Jan 21, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-24029In Progress WS_FTP Server before 8.8, it is possible for a h…7.2
• CVE-2023-24030An open redirect vulnerability exists in the /preauth Servle…6.1
• CVE-2023-24031An issue was discovered in Zimbra Collaboration (ZCS) 9.0 an…6.1
• CVE-2023-24032In Zimbra Collaboration Suite through 9.0 and 8.8.15, an att…7.8
• CVE-2023-24033The Samsung Exynos Modem 5123, Exynos Modem 5300, Exynos 980…9.8
• CVE-2023-24038The HTML-StripScripts module through 1.06 for Perl allows _h…7.5
• CVE-2023-2404The CRM and Lead Management by vcita plugin for WordPress is…5.4
• CVE-2023-24040dtprintinfo in Common Desktop Environment 1.6 has a bug in t…7.1
• CVE-2023-24042A race condition in LightFTP through 2.2 allows an attacker …7.5
• CVE-2023-24044A Host Header Injection issue on the Login page of Plesk Obs…6.1
• CVE-2023-24045In Dataiku DSS 11.2.1, an attacker can download other Dataik…6.5
• CVE-2023-24046An issue was discovered on Connectize AC21000 G6 641.139.1.1…6.8