Login Request a demo
Unscored severity · published Sep 2, 2002
CVE-2002-1604
Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to (1) csh, (2) dtsession,…
–
CVSS
15%
EPSS
No
On KEV
Description
Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to (1) csh, (2) dtsession, (3) dxsysinfo, (4) imapd, (5) inc, (6) uucp, (7) uux, (8) rdist, or (9) deliver.
Exploitation
Is it being used?
Exploit prediction (EPSS)15.0% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HP
Hp-ux · HP
10.20; 11.00; 11.04; 11.11; 11.22 · source: NVD
TR
Tru64 · HP
4.0f; 4.0g; 5.0a; 5.1; 5.1a · source: NVD
Affected product
HP
Hp-ux
HP
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1604
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1604
archives.neohapsis.com
http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html
wwss1pro.compaq.com
http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11
Exploit
http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_nlspath.txt
Third Party Advisory
http://www.kb.cert.org/vuls/id/158499
Third Party Advisory
http://www.kb.cert.org/vuls/id/416427
Third Party Advisory
http://www.kb.cert.org/vuls/id/437899
More from Hp-ux
9.8
CVE-2012-1823
PHP-CGI Query String Parameter Vulnerability
7.5
CVE-2015-5477
ISC BIND Data Processing Errors Vulnerability
9.8
CVE-2001-0249
Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which uses glob to…
9.8
CVE-2001-0248
Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to…
9.3
CVE-2024-42500
HPE has identified a denial of service vulnerability in HPE HP-UX System's Network File System (NFSv4) services