CVE-2002-1604

Description (CNA)

Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to (1) csh, (2) dtsession, (3) dxsysinfo, (4) imapd, (5) inc, (6) uucp, (7) uux, (8) rdist, or (9) deliver.

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• http://www.kb.cert.org/vuls/id/584243
• http://www.kb.cert.org/vuls/id/567963
• http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11
• http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html
• http://www.kb.cert.org/vuls/id/846307
• http://www.kb.cert.org/vuls/id/437899
• http://www.kb.cert.org/vuls/id/531355
• http://www.kb.cert.org/vuls/id/158499
• http://www.kb.cert.org/vuls/id/448987
• http://www.kb.cert.org/vuls/id/416427
• http://www.securityfocus.com/bid/5647
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10016
• http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html
• http://www.securityfocus.com/archive/1/290115
• http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_nlspath.txt
• http://www.kb.cert.org/vuls/id/592515

ADP enrichment