Unscored severity · published Aug 1, 2002
CVE-2002-1616
Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain root privileges via (1) su, (2) chsh, (3) passwd, (4) chfn, (5) dxchpwd, and…
–
CVSS
3.9%
EPSS
No
On KEV
Description
Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain root privileges via (1) su, (2) chsh, (3) passwd, (4) chfn, (5) dxchpwd, and (6) libc.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.9% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TR
Tru64 · HP
4.0f; 4.0g; 5.0a; 5.1; 5.1af · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1616
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1616
archives.neohapsis.com
http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html
archives.neohapsis.com
http://archives.neohapsis.com/archives/tru64/2002-q3/0019.html
Exploit
http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_su.txt
Third Party Advisory
http://www.kb.cert.org/vuls/id/137555
Third Party Advisory
http://www.kb.cert.org/vuls/id/177067
Patch
http://www.kb.cert.org/vuls/id/193347
More from Tru64
4.0
CVE-1999-0524
ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts
–
CVE-2008-4414
Unspecified vulnerability in the AdvFS showfile command in HP Tru64 UNIX 5.1B-3 and 5.1B-4 allows local users to gain privileges via unspecified vectors
–
CVE-2007-6519
Unspecified vulnerability in the File-on-File Mounting File System (FFM) in HP Tru64 UNIX 5.1B-4 and 5.1B-3 allows local users to cause a denial of service (system crash) via…
–
CVE-2007-2791
Unspecified vulnerability in the Secure Shell (SSH) in HP Tru64 UNIX 5.1B-4 and 5.1B-3 allows remote attackers to identify valid users via unspecified vectors, probably related to…
–
CVE-2007-2553
Unspecified vulnerability in dop in HP Tru64 UNIX 5.1B-4, 5.1B-3, and 5.1A PK6 allows local users to gain privileges via a large amount of data in the environment, as demonstrated…