Strix
26.1K

CVE-2002-1605

UnknownEPSS 13.32%

Last modified

CVE-2002-1605 is a vulnerability of currently unknown severity. Buffer overflow in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code via a long _XKB_CHARSET environment variable to (1) dxpause, (2) dxconsole, or (3) dtsession.. EPSS estimates a 13.32% chance of exploitation in the next 30 days.

Description

Buffer overflow in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code via a long _XKB_CHARSET environment variable to (1) dxpause, (2) dxconsole, or (3) dtsession.

Metrics

EPSS Probability
13.32%

95.9th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersions
HpHp-Ux10.20
HpHp-Ux11.00
HpHp-Ux11.04
HpHp-Ux11.11
HpHp-Ux11.22
HpTru644.0f
HpTru644.0g
HpTru645.0a
HpTru645.1
HpTru645.1a

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2002-1605?
Buffer overflow in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code via a long _XKB_CHARSET environment variable to (1) dxpause, (2) dxconsole, or (3) dtsession.
How severe is CVE-2002-1605?
Severity scoring for CVE-2002-1605 is pending analysis. The EPSS model estimates a 13.32% probability of exploitation in the next 30 days.
How do I fix CVE-2002-1605?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2002-1605?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST