Unscored severity · published Dec 31, 2002
CVE-2002-2002
Buffer overflow in libc in Compaq Tru64 4.0F, 5.0, 5.1 and 5.1A allows attackers to execute arbitrary code via long (1) LANG and (2) LOCPATH environment variables
–
CVSS
2.7%
EPSS
No
On KEV
Description
Buffer overflow in libc in Compaq Tru64 4.0F, 5.0, 5.1 and 5.1A allows attackers to execute arbitrary code via long (1) LANG and (2) LOCPATH environment variables.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.7% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TR
Tru64 · Compaq
4.0f; 5.0; 5.1; 5.1a · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-2002
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-2002
Patch
http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00219.html
ftp.support.compaq.com
http://ftp.support.compaq.com/patches/.new/html/SSRT-541.shtml
Patch
http://www.iss.net/security_center/static/8863.php
www.lac.co.jp
http://www.lac.co.jp/security/english/snsadv_e/51_e.html
Patch
http://www.securityfocus.com/bid/4544
More from Tru64
–
CVE-2005-0223
The Software Development Kit (SDK) and Run Time Environment (RTE) 1.4.1 and 1.4.2 for Tru64 UNIX allows remote attackers to cause a denial of service (Java Virtual Machine hang)…
–
CVE-2003-0914
ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL…
–
CVE-2003-0724
ssh on HP Tru64 UNIX 5.1B and 5.1A does not properly handle RSA signatures when digital certificates and RSA keys are used, which could allow local and remote attackers to gain…
–
CVE-2003-0688
The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initialize certain data structures, which allows remote attackers to cause a…
–
CVE-2003-0694
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c