Vulnerability in Hp Hp-Ux

CVE-2002-1605

Buffer overflow in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code via a long _XKB_CHARSET environment variable to (1) dxpause, (2) dxconsole, or (3) dtsession.

EPSS: 0.133 (96.0th percentile) — read the EPSS interpretation.

Affected products

  • Hp Hp-ux — versions 10.20, 11.00, 11.04
  • Hp Tru64 — versions 4.0f, 4.0g, 5.0a
  • N/a — versions n/a

References

  • cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
  • cve@mitre.org (x_refsource_HP, vendor-advisory)
  • cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, x_refsource_FULLDISC)
  • cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
  • cve@mitre.org (Exploit, x_refsource_MISC)
  • cve@mitre.org (vdb-entry, x_refsource_XF)
  • cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
  • cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)