CVE-2002-1604

published 2002-09-02

CVE-2002-1604: Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to (1)…

high 7.5 CVSS 3.1

AV N AC L Au N C P I P A P

Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to (1) csh, (2) dtsession, (3) dxsysinfo, (4) imapd, (5) inc, (6) uucp, (7) uux, (8) rdist, or (9) deliver.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
hp	hp-ux	—	—
hp	hp-ux	—	—
hp	hp-ux	—	—
hp	hp-ux	—	—
hp	hp-ux	—	—
hp	tru64	—	—
hp	tru64	—	—
hp	tru64	—	—
hp	tru64	—	—
hp	tru64	—	—