VULNERABILITY INTELLIGENCE

CVE-2002-1604

CVSS score7.5 HIGH
EPSS probability14.97%
CISA KEVNot currently listed
Published2002-09-02
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to (1) csh, (2) dtsession, (3) dxsysinfo, (4) imapd, (5) inc, (6) uucp, (7) uux, (8) rdist, or (9) deliver.

Primary references