Unscored CVE-2002-1604 EUVD-2002-1585GHSA-cm7j-94hg-gxf8

Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environme…

Published Mar 25, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to (1) csh, (2) dtsession, (3) dxsysinfo, (4) imapd, (5) inc, (6) uucp, (7) uux, (8) rdist, or (9) deliver.

References

VU#584243 third-party-advisory
VU#567963 third-party-advisory
SSRT2275 vendor-advisory
20020919 iDEFENSE OSF1/Tru64 3.x vuln clarification mailing-list
VU#846307 third-party-advisory
VU#437899 third-party-advisory
VU#531355 third-party-advisory
VU#158499 third-party-advisory
VU#448987 third-party-advisory
VU#416427 third-party-advisory
5647 vdb-entry
tru64-multiple-binaries-bo(10016) vdb-entry
20020902 Happy Labor Day from Snosoft mailing-list
http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_nlspath.txt
VU#592515 third-party-advisory