CVE-2002-0816 Buffer overflow in su in Tru64 Unix 5.x allows local users to gain root privileges via a long username and argument.
HighCVSS 7.2
EPSS 0.44%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in su in Tru64 Unix 5.x allows local users to gain root privileges via a long username and argument.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| compaq tru64 | = 4.0f | No fix listed |
| compaq tru64 | = 4.0g | No fix listed |
| compaq tru64 | = 5.0 | No fix listed |
| compaq tru64 | = 5.0a | No fix listed |
| compaq tru64 | = 5.1 | No fix listed |
| compaq tru64 | = 5.1a | No fix listed |
References
- SSRT2257 vendor-advisory
- 20020719 tru64 proof of concept /bin/su non-exec bypass mailing-list
- tru64-su-bo(9640) vdb-entry
- VU#229867 third-party-advisory us-government-resource
- 5272 vdb-entry