What’s Vulnerable › Vulnerabilities

CVE-2002-1128

• Severity: high (CVSS 7.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2002-10-04 · updated 2026-06-16

Description

Buffer overflow in inc mail utility for Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long MH environment variable.

Affected products

• Digital Osf 1: 3.0, 3.0b, 3.2, 3.2b, 3.2c, 3.2d (+5)
• Digital Ultrix: 3.0

References

• http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0122.html
• http://www.iss.net/security_center/static/10147.php
• http://www.securityfocus.com/bid/5747
• http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0122.html
• http://www.iss.net/security_center/static/10147.php
• http://www.securityfocus.com/bid/5747

Get alerted when CVE-2002-1128 or the next vulnerability affects your stack