Vulnerability in Hp Hp-Ux

CVE-2002-1604

Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to (1) csh, (2) dtsession, (3) dxsysinfo, (4) imapd, (5) inc, (6) uucp, (7) uux, (8) rdist, or (9) deliver.

EPSS: 0.150 (96.4th percentile) — read the EPSS interpretation.

Affected products

  • Hp Hp-ux — versions 10.20, 11.00, 11.04
  • Hp Tru64 — versions 4.0f, 4.0g, 5.0a
  • N/a — versions n/a

Public proof-of-concept exploits

References

  • cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
  • cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
  • cve@mitre.org (x_refsource_HP, vendor-advisory)
  • cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, x_refsource_FULLDISC)
  • cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
  • cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
  • cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
  • cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
  • cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
  • cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)

Frequently asked questions

What is CVE-2002-1604?
CVE-2002-1604 is a vulnerability in Hp Hp-Ux. Published 2002-09-02.
Is CVE-2002-1604 known to be exploited?
1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.