CVE-2002-1513
published 2003-04-02CVE-2002-1513: The UCX POP server in HP TCP/IP services for OpenVMS 4.2 through 5.3 allows local users to truncate arbitrary files via the -logfile command line option, which…
PriorityP418medium4.6CVSS 2.0
AVLACLAuNCPIPAP
EXPLOIT
EPSS
0.78%
51.2th percentile
The UCX POP server in HP TCP/IP services for OpenVMS 4.2 through 5.3 allows local users to truncate arbitrary files via the -logfile command line option, which overrides file system permissions because the server runs with the SYSPRV and BYPASS privileges.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| compaq | tcp-ip_services | — | — |
| compaq | tcp-ip_services | — | — |
| compaq | tcp-ip_services | — | — |
| compaq | tcp-ip_services | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://archives.neohapsis.com/archives/bugtraq/2002-10/0010.htmlhttp://archives.neohapsis.com/archives/compaq/2002-q4/0000.htmlhttp://online.securityfocus.com/archive/1/293070http://www.iss.net/security_center/static/10236.phphttp://www.securityfocus.com/bid/5790http://archives.neohapsis.com/archives/bugtraq/2002-10/0010.htmlhttp://archives.neohapsis.com/archives/compaq/2002-q4/0000.htmlhttp://online.securityfocus.com/archive/1/293070http://www.iss.net/security_center/static/10236.phphttp://www.securityfocus.com/bid/5790
2003-04-02
Published