CVE-2002-1687: Buffer Overflow

Published Dec 31, 2002

Updated

Buffer overflow in the diagnostics library in AIX allows local users to "cause data and instructions to be overwritten" via a long DIAGNOSTICS environment variable.

Affected Software

1 affected component

IBM AIX

Event History

Dec 31, 2002

CVE Published

05:00 AM

Jun 21, 2005

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-1687?

CVE-2002-1687 is classified as a high severity vulnerability due to its potential for local exploitation leading to unauthorized access.

How do I fix CVE-2002-1687?

Fixing CVE-2002-1687 involves updating to the latest version of AIX that patches this buffer overflow vulnerability.

Who is affected by CVE-2002-1687?

Local users of IBM AIX systems are affected by CVE-2002-1687 due to the diagnostics library vulnerability.

What impact does CVE-2002-1687 have?

CVE-2002-1687 can lead to data corruption and unauthorized overwriting of instructions, posing a risk to system integrity.

Is CVE-2002-1687 easy to exploit?

Yes, CVE-2002-1687 can be relatively easy to exploit by local users with the ability to set the DIAGNOSTICS environment variable.