Description
Multiple buffer overflows in HP Tru64 UNIX 5.x allow local users to execute arbitrary code via (1) a long -contextDir argument to dtaction, (2) a long -p argument to dtprintinfo, (3) a long -customization argument to dxterm, or (4) a long DISPLAY environment variable to dtterm.
References
- 20020919 iDEFENSE OSF1/Tru64 3.x vuln clarification mailing-list
- VU#931579 third-party-advisory
- VU#836275 third-party-advisory
- VU#202939 third-party-advisory
- 20020902 Happy Labor Day from Snosoft mailing-list
- VU#600699 third-party-advisory
- http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_dtterm.txt
- http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_dtprintinfo.txt
- http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_dxterm.txt
- http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_dtaction.txt