CVE-2002-1616 Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain root privileges via (1) su, (2) chsh, (3) passwd, (4) chfn, (5) dxchpwd, and (6) libc.
HighCVSS 7.2
EPSS 3.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain root privileges via (1) su, (2) chsh, (3) passwd, (4) chfn, (5) dxchpwd, and (6) libc.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc tru64 | = 4.0f | No fix listed |
| HP Inc tru64 | = 4.0g | No fix listed |
| HP Inc tru64 | = 5.0a | No fix listed |
| HP Inc tru64 | = 5.1 | No fix listed |
| HP Inc tru64 | = 5.1af | No fix listed |
References
- 20020919 iDEFENSE OSF1/Tru64 3.x vuln clarification mailing-list
- SSRT2257 vendor-advisory
- www.blacksheepnetworks.com exploit
- VU#137555 third-party-advisory us-government-resource
- VU#177067 third-party-advisory us-government-resource
- VU#193347 patch third-party-advisory us-government-resource
- VU#671627 third-party-advisory us-government-resource
- VU#864083 third-party-advisory us-government-resource
- 20020902 Happy Labor Day from Snosoft mailing-list vendor-advisory
- 5379 vdb-entry vendor-advisory
- 5380 patch vdb-entry
- 5381 patch vdb-entry
- 5382 patch vdb-entry
- tru64-chfn-bo(10614) vdb-entry
- tru64-dxchpwd-bo(11620) vdb-entry