CVE-2002-1617

Опубликовано: 31 дек. 2002

Источник: nvd

CVSS2: 7.2

EPSS Низкий

Описание

Multiple buffer overflows in HP Tru64 UNIX 5.x allow local users to execute arbitrary code via (1) a long -contextDir argument to dtaction, (2) a long -p argument to dtprintinfo, (3) a long -customization argument to dxterm, or (4) a long DISPLAY environment variable to dtterm.

Ссылки

http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html
http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html
http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_dtaction.txt
Exploit
http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_dtprintinfo.txt
Exploit
http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_dtterm.txt
Exploit
http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_dxterm.txt
Exploit
http://www.kb.cert.org/vuls/id/202939
US Government Resource
http://www.kb.cert.org/vuls/id/600699
US Government Resource
http://www.kb.cert.org/vuls/id/836275
US Government Resource
http://www.kb.cert.org/vuls/id/931579
US Government Resource
http://www.securityfocus.com/archive/1/290115
Vendor Advisory
http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html
http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html
http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_dtaction.txt
Exploit
http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_dtprintinfo.txt
Exploit
http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_dtterm.txt
Exploit
http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_dxterm.txt
Exploit
http://www.kb.cert.org/vuls/id/202939
US Government Resource
http://www.kb.cert.org/vuls/id/600699
US Government Resource
http://www.kb.cert.org/vuls/id/836275
US Government Resource

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:hp:tru64:5.1b_pk2_bl22:*:*:*:*:*:*:*

EPSS

Процентиль: 48%

0.00247

Низкий

7.2 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-59xx-m4qv-93v2

github

почти 4 года назад