CVE-2002-1617
8.2 High
AI Score
Confidence
Low
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
18.7%
Multiple buffer overflows in HP Tru64 UNIX 5.x allow local users to execute arbitrary code via (1) a long -contextDir argument to dtaction, (2) a long -p argument to dtprintinfo, (3) a long -customization argument to dxterm, or (4) a long DISPLAY environment variable to dtterm.
| CPE | Name | Operator | Version |
|---|---|---|---|
| hp:tru64 | hp tru64 | eq | 5.1b_pk2_bl22 |
References
archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html
www.blacksheepnetworks.com/security/hack/tru64/TRU64_dtaction.txt
www.blacksheepnetworks.com/security/hack/tru64/TRU64_dtprintinfo.txt
www.blacksheepnetworks.com/security/hack/tru64/TRU64_dtterm.txt
www.blacksheepnetworks.com/security/hack/tru64/TRU64_dxterm.txt
www.kb.cert.org/vuls/id/202939
www.kb.cert.org/vuls/id/600699
www.kb.cert.org/vuls/id/836275
www.kb.cert.org/vuls/id/931579
www.securityfocus.com/archive/1/290115
8.2 High
AI Score
Confidence
Low
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
18.7%