CVE-2002-2002: Buffer Overflow
Published Dec 31, 2002
·Updated
Buffer overflow in libc in Compaq Tru64 4.0F, 5.0, 5.1 and 5.1A allows attackers to execute arbitrary code via long (1) LANG and (2) LOCPATH environment variables.
Affected Software
4 affected components
Compaq Tru64=4.0f
Compaq Tru64=5.0
Compaq Tru64=5.1
Compaq Tru64=5.1a
Remediation
Patch Available
Patch Available
Event History
Dec 31, 2002
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityAffected Software
Jul 14, 2005
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-2002?
CVE-2002-2002 is classified as a high severity vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2002-2002?
To mitigate CVE-2002-2002, you should upgrade to a patched version of Compaq Tru64 that addresses the buffer overflow issue.
3
Which versions of Compaq Tru64 are affected by CVE-2002-2002?
CVE-2002-2002 affects Compaq Tru64 versions 4.0F, 5.0, 5.1, and 5.1A.
4
What types of attacks can CVE-2002-2002 be used for?
CVE-2002-2002 can be exploited by attackers to execute arbitrary code on the affected systems.
5
Are there any workarounds for CVE-2002-2002?
While upgrading is the best solution for CVE-2002-2002, temporary workarounds may include limiting environment variable inputs.