CVE-2002-0677

CVE-2002-0677 describes a critical vulnerability in the CDE ToolTalk database server (ttdbserver) that allows remote attackers to overwrite arbitrary memory locations with a zero, potentially leading to privilege escalation. This flaw, stemming from a file descriptor argument being used as a table index, impacts a wide range of Unix-like systems including Caldera, Compaq, HP, IBM, SGI, Sun, and Xi Graphics. With a CVSS score of 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P), it represents a high-severity risk due to its network-based attack vector, low attack complexity, and potential for partial confidentiality, integrity, and availability compromise. While there is no known active exploitation, publicly available exploit code, or KEV listing, the vulnerability has garnered significant community discussion, indicating ongoing interest despite its age.