CVE-2002-2002 Buffer overflow in libc in Compaq Tru64 4.0F, 5.0, 5.1 and 5.1A allows attackers to execute arbitrary code via long (1) LANG and (2) LOCPATH environment variables.
HighCVSS 7.5
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in libc in Compaq Tru64 4.0F, 5.0, 5.1 and 5.1A allows attackers to execute arbitrary code via long (1) LANG and (2) LOCPATH environment variables.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| compaq tru64 | = 4.0f | No fix listed |
| compaq tru64 | = 5.0 | No fix listed |
| compaq tru64 | = 5.1 | No fix listed |
| compaq tru64 | = 5.1a | No fix listed |
References
- 20020417 [SNS Advisory No.51] Compaq Tru64 UNIX libc Buffer Overflow Vulnerability mailing-list patch vendor-advisory
- SSRT0771U vendor-advisory
- libc-lang-locpath-bo(8863) patch vdb-entry
- www.lac.co.jp
- 4544 patch vdb-entry