Strix
26.1K

CVE-2002-1604

UnknownEPSS 14.97%

Last modified

CVE-2002-1604 is a vulnerability of currently unknown severity. Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to (1) csh, (2) dtsession, (3) dxsysinfo, (4) imapd, (5) inc, (6) uucp, (7) uux, (8) rdist, or (9) deliver.. EPSS estimates a 14.97% chance of exploitation in the next 30 days.

Description

Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to (1) csh, (2) dtsession, (3) dxsysinfo, (4) imapd, (5) inc, (6) uucp, (7) uux, (8) rdist, or (9) deliver.

Metrics

EPSS Probability
14.97%

96.3th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersions
HpHp-Ux10.20
HpHp-Ux11.00
HpHp-Ux11.04
HpHp-Ux11.11
HpHp-Ux11.22
HpTru644.0f
HpTru644.0g
HpTru645.0a
HpTru645.1
HpTru645.1a

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2002-1604?
Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to (1) csh, (2) dtsession, (3) dxsysinfo, (4) imapd, (5) inc, (6) uucp, (7) uux, (8) rdist, or (9) deliver.
How severe is CVE-2002-1604?
Severity scoring for CVE-2002-1604 is pending analysis. The EPSS model estimates a 14.97% probability of exploitation in the next 30 days.
How do I fix CVE-2002-1604?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2002-1604?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST