Skip to content

CVE-2001-0803

Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control...

10.0 HighPublic exploit

CVE-2001-0803 is a high vulnerability (CVSS 10.0) in Open Group Cde Common Desktop Environment, published December 6, 2001. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 85.6%, the 99th percentile. No source names a fixed version.

Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remote attackers to execute arbitrary commands.

Exploit likelihood

85.6%Up 8.2 points since Feb 4, 2022

What each source reports

NVD Score used 10.0

Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remote attackers to execute arbitrary commands.

Record: CVE-2001-0803
CVSS 2.0: 10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness: CWE-119
Updated: 2026-11-02

CVE List No score

Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remote attackers to execute arbitrary commands.

Record: CVE-2001-0803
Updated: 2026-11-02

EUVDEUVD-2001-0787 No score

Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remote attackers to execute arbitrary commands.

Record: EUVD-2001-0787
Updated: 2026-11-03

GitHub AdvisoriesGHSA-p2mw-q26f-vf87 No score

Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control...

Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remote attackers to execute arbitrary commands.

Record: GHSA-p2mw-q26f-vf87
Weakness: CWE-119
Updated: 2026-11-02

Affected products

open group cde common desktop environment

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Solaris dtspcd - Remote Heap Overflow (Metasploit)	2010-04-30
Exploit-DB	Solaris 8 dtspcd - Remote Heap Overflow (Metasploit)	2002-06-10
Metasploit	Solaris dtspcd Heap Overflow	2002-07-10

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD

References

Show 7 moreShow less