CVE-2002-1604

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 15.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2002-09-02 · updated 2026-06-16

Description

Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to (1) csh, (2) dtsession, (3) dxsysinfo, (4) imapd, (5) inc, (6) uucp, (7) uux, (8) rdist, or (9) deliver.

Affected products

Hewlett Packard Enterprise (HPE) HP-UX: 10.20, 11.00, 11.04, 11.11, 11.22
HP Tru64: 4.0f, 4.0g, 5.0a, 5.1, 5.1a

References

http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html
http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html
http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html
http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html
http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11
http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_nlspath.txt
http://www.kb.cert.org/vuls/id/158499
http://www.kb.cert.org/vuls/id/416427
http://www.kb.cert.org/vuls/id/437899
http://www.kb.cert.org/vuls/id/448987
http://www.kb.cert.org/vuls/id/531355
http://www.kb.cert.org/vuls/id/567963

Get alerted when CVE-2002-1604 or the next vulnerability affects your stack