CVE-2002-1605 Buffer overflow in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code via a long _XKB_CHARSET environment variable to (1) dxpause, (2) dxconsole, or (3) dtsession...
HighCVSS 7.5
EPSS 13.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code via a long _XKB_CHARSET environment variable to (1) dxpause, (2) dxconsole, or (3) dtsession.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc hp-ux | = 10.20 | No fix listed |
| HP Inc hp-ux | = 11.00 | No fix listed |
| HP Inc hp-ux | = 11.04 | No fix listed |
| HP Inc hp-ux | = 11.11 | No fix listed |
| HP Inc hp-ux | = 11.22 | No fix listed |
| HP Inc tru64 | = 4.0f | No fix listed |
| HP Inc tru64 | = 4.0g | No fix listed |
| HP Inc tru64 | = 5.0a | No fix listed |
| HP Inc tru64 | = 5.1 | No fix listed |
| HP Inc tru64 | = 5.1a | No fix listed |
References
- 20020919 iDEFENSE OSF1/Tru64 3.x vuln clarification mailing-list
- SSRT2275 vendor-advisory
- www.blacksheepnetworks.com exploit
- VU#569987 third-party-advisory us-government-resource
- VU#584243 third-party-advisory us-government-resource
- VU#693803 third-party-advisory us-government-resource
- 20020902 Happy Labor Day from Snosoft mailing-list
- tru64-multiple-binaries-bo(10016) vdb-entry