CVEvulnerability
CVE-2002-1616
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-08-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain root privileges via (1) su, (2) chsh, (3) passwd, (4) chfn, (5) dxchpwd, and (6) libc.
Affected configurations
• hp tru64 4.0f
• hp tru64 4.0g
• hp tru64 5.0a
• hp tru64 5.1
• hp tru64 5.1af
References
- http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/tru64/2002-q3/0019.html archives.neohapsis.com
- http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_su.txt Exploit
- http://www.kb.cert.org/vuls/id/137555 Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/177067 Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/193347 Patch, US Government Resource
- http://www.kb.cert.org/vuls/id/671627 Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/864083 US Government Resource
- http://www.securityfocus.com/archive/1/290115 Vendor Advisory
- http://www.securityfocus.com/bid/5379 Vendor Advisory
- http://www.securityfocus.com/bid/5380 Patch
- http://www.securityfocus.com/bid/5381 Patch
- http://www.securityfocus.com/bid/5382 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10614 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11620 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/tru64/2002-q3/0019.html archives.neohapsis.com
- http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_su.txt Exploit
- http://www.kb.cert.org/vuls/id/137555 Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/177067 Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/193347 Patch, US Government Resource
- http://www.kb.cert.org/vuls/id/671627 Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/864083 US Government Resource
- http://www.securityfocus.com/archive/1/290115 Vendor Advisory
- http://www.securityfocus.com/bid/5379 Vendor Advisory
- http://www.securityfocus.com/bid/5380 Patch
- http://www.securityfocus.com/bid/5381 Patch
- http://www.securityfocus.com/bid/5382 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10614 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11620 exchange.xforce.ibmcloud.com