What’s Vulnerable › Vulnerabilities

CVE-2002-1615

• Severity: high (CVSS 7.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2002-09-13 · updated 2026-06-16

Description

Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to execute arbitrary code via (1) msgchk or (2) .upd..loader.

Affected products

• Hewlett Packard Enterprise (HPE) HP-UX: 10.20, 11.00, 11.04, 11.11, 11.22
• HP Tru64: 4.0f, 4.0g, 5.0a, 5.1, 5.1a

References

• http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11
• http://www.kb.cert.org/vuls/id/506441
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10016
• http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11
• http://www.kb.cert.org/vuls/id/506441
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10016

Get alerted when CVE-2002-1615 or the next vulnerability affects your stack