| Vulnerability Name: | CVE-2002-1617 (CCN-22804) | ||||||||
| Assigned: | 2002-09-19 | ||||||||
| Published: | 2002-09-19 | ||||||||
| Updated: | 2011-03-08 | ||||||||
| Summary: | Multiple buffer overflows in HP Tru64 UNIX 5.x allow local users to execute arbitrary code via (1) a long -contextDir argument to dtaction, (2) a long -p argument to dtprintinfo, (3) a long -customization argument to dxterm, or (4) a long DISPLAY environment variable to dtterm. | ||||||||
| CVSS v3 Severity: | 5.9 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||
| CVSS v2 Severity: | 7.2 High (CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C) 5.8 Medium (Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:U/RC:UR)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:U/RC:UR)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Gain Privileges | ||||||||
| References: | Source: CCN Type: Full-Disclosure Mailing List, Sep 19 2002 - 16:09:41 CDT iDEFENSE OSF1/Tru64 3.x vuln clarification Source: FULLDISC Type: UNKNOWN 20020919 iDEFENSE OSF1/Tru64 3.x vuln clarification Source: MITRE Type: CNA CVE-2002-1617 Source: MISC Type: Exploit http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_dtaction.txt Source: MISC Type: Exploit http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_dtprintinfo.txt Source: MISC Type: Exploit http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_dtterm.txt Source: MISC Type: Exploit http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_dxterm.txt Source: CERT-VN Type: US Government Resource VU#202939 Source: CERT-VN Type: US Government Resource VU#600699 Source: CERT-VN Type: US Government Resource VU#836275 Source: CERT-VN Type: US Government Resource VU#931579 Source: CCN Type: OSVDB ID: 18209 HP Tru64 UNIX dtaction -contextDir Parameter Local Overflow Source: CCN Type: OSVDB ID: 18210 HP Tru64 UNIX dtprintinfo -p Parameter Local Overflow Source: CCN Type: OSVDB ID: 18211 HP Tru64 UNIX dxterm -customization Parameter Local Overflow Source: CCN Type: OSVDB ID: 18212 HP Tru64 UNIX dtterm DISPLAY Variable Local Overflow Source: BUGTRAQ Type: Vendor Advisory 20020902 Happy Labor Day from Snosoft Source: XF Type: UNKNOWN tru64-multiple-bo(22804) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||