CVE-2002-1605

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 13.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2002-09-02 · updated 2026-06-16

Description

Buffer overflow in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code via a long _XKB_CHARSET environment variable to (1) dxpause, (2) dxconsole, or (3) dtsession.

Affected products

Hewlett Packard Enterprise (HPE) HP-UX: 10.20, 11.00, 11.04, 11.11, 11.22
HP Tru64: 4.0f, 4.0g, 5.0a, 5.1, 5.1a

References

http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html
http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html
http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html
http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html
http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11
http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_xkb.txt
http://www.kb.cert.org/vuls/id/569987
http://www.kb.cert.org/vuls/id/584243
http://www.kb.cert.org/vuls/id/693803
http://www.securityfocus.com/archive/1/290115
https://exchange.xforce.ibmcloud.com/vulnerabilities/10016
http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html

Get alerted when CVE-2002-1605 or the next vulnerability affects your stack