CVE-2002-1513: Medium severity Compaq Tcp-ip Services vulnerability
The UCX POP server in HP TCP/IP services for OpenVMS 4.2 through 5.3 allows local users to truncate arbitrary files via the -logfile command line option, which overrides file system permissions because the server runs with the SYSPRV and BYPASS privileges.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1513?
CVE-2002-1513 is considered a high severity vulnerability due to its potential to allow unauthorized file truncation by local users.
How do I fix CVE-2002-1513?
To fix CVE-2002-1513, you should update to a secured version of the HP TCP/IP services for OpenVMS that eliminates the privilege escalation risk.
Who is affected by CVE-2002-1513?
CVE-2002-1513 affects local users of HP TCP/IP services for OpenVMS versions 4.2 through 5.3.
What are the ramifications of exploiting CVE-2002-1513?
Exploiting CVE-2002-1513 can lead to unauthorized modification or truncation of files, impacting system integrity.
Is CVE-2002-1513 a local or remote vulnerability?
CVE-2002-1513 is a local vulnerability, meaning that it can only be exploited by users with local access to the system.