CVEvulnerability
CVE-2002-1605
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-09-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Buffer overflow in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code via a long _XKB_CHARSET environment variable to (1) dxpause, (2) dxconsole, or (3) dtsession.
Affected configurations
• hp hp-ux 10.20
• hp hp-ux 11.00
• hp hp-ux 11.04
• hp hp-ux 11.11
• hp hp-ux 11.22
• hp tru64 4.0f
• hp tru64 4.0g
• hp tru64 5.0a
• hp tru64 5.1
• hp tru64 5.1a
References
- http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html archives.neohapsis.com
- http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11 wwss1pro.compaq.com
- http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_xkb.txt Exploit
- http://www.kb.cert.org/vuls/id/569987 Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/584243 Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/693803 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/archive/1/290115 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10016 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html archives.neohapsis.com
- http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11 wwss1pro.compaq.com
- http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_xkb.txt Exploit
- http://www.kb.cert.org/vuls/id/569987 Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/584243 Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/693803 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/archive/1/290115 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10016 exchange.xforce.ibmcloud.com