CVE-2002-1617: Buffer Overflow
First published: Tue Dec 31 2002(Updated: )
Multiple buffer overflows in HP Tru64 UNIX 5.x allow local users to execute arbitrary code via (1) a long -contextDir argument to dtaction, (2) a long -p argument to dtprintinfo, (3) a long -customization argument to dxterm, or (4) a long DISPLAY environment variable to dtterm.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| HP Tru64 UNIX | =5.1b_pk2_bl22 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/archive/1/290115
- http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_dxterm.txt
- http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_dtterm.txt
- http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_dtprintinfo.txt
- http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_dtaction.txt
- http://www.kb.cert.org/vuls/id/836275
- http://www.kb.cert.org/vuls/id/600699
- http://www.kb.cert.org/vuls/id/931579
- http://www.kb.cert.org/vuls/id/202939
- http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html
Frequently Asked Questions
What is the severity of CVE-2002-1617?
CVE-2002-1617 has a high severity due to multiple buffer overflow vulnerabilities that can lead to arbitrary code execution.
How do I fix CVE-2002-1617?
To fix CVE-2002-1617, it is recommended to apply software patches provided by HP for the affected Tru64 UNIX 5.x version.
What systems are affected by CVE-2002-1617?
CVE-2002-1617 affects HP Tru64 UNIX versions 5.1b_pk2_bl22 and possibly other versions within the 5.x release.
Who is at risk from CVE-2002-1617?
Local users of affected HP Tru64 UNIX systems are at risk from CVE-2002-1617 due to the buffer overflow vulnerabilities.
What types of attacks can exploit CVE-2002-1617?
CVE-2002-1617 can be exploited through various methods, including passing long arguments to specific commands like dtaction and dtprintinfo.
- agent/references
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/weakness
- agent/severity
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/hp
- canonical/hp tru64 unix
- version/hp tru64 unix/5.1b_pk2_bl22