Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remote attackers to exec

Summary

Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remote attackers to execute arbitrary commands.

Timeline

1. Mar 9, 2002, 5:00 AM UTCCVE published
2. Jun 10, 2002Public exploit on Exploit-DB

   EDB-9923, EDB-16323

3. Aug 8, 2024, 4:37 AM UTCRecord last updated
4. Oct 28, 2026EPSS reached 10%

   FIRST estimates at least a 10% chance of exploitation in the next 30 days

Affected versions

• n/a n/a

  Version range not reported

References 16