CVE ID:	CVE-2002-0679
Description:	Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to execute arbitrary code via an argument to the _TT_CREATE_FILE procedure.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2002-0679 AIX APAR: IY32792 http://www-1.ibm.com/support/search.wss?rs=0&q=IY32792&apar=only AIX APAR: IY32793 http://www-1.ibm.com/support/search.wss?rs=0&q=IY32793&apar=only BugTraq ID: 5444 http://www.securityfocus.com/bid/5444 Bugtraq: 20020812 ENTERCEPT RICOCHET ADVISORY: Multi-Vendor CDE ToolTalk Database (Google Search) http://marc.info/?l=bugtraq&m=102917002523536&w=2 Caldera Security Advisory: CSSA-2002-SCO.28.1 Cert/CC Advisory: CA-2002-26 http://www.cert.org/advisories/CA-2002-26.html CERT/CC vulnerability note: VU#387387 http://www.kb.cert.org/vuls/id/387387 COMPAQ Service Security Patch: SSRT2274 HPdes Security Advisory: HPSBUX0207-199 http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0207-199 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A177 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A192 XForce ISS Database: tooltalk-ttdbserverd-ttcreatefile-bo(9822) http://www.iss.net/security_center/static/9822.php