CVE-2002-1616

Published: Aug 1, 2002Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain root privileges via (1) su, (2) chsh, (3) passwd, (4) chfn, (5) dxchpwd, and (6) libc.

Affected (5)

Products: Hp: Tru64

1 product

Tru64

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Hp Tru64	Version 4.0f
Hp Tru64	Version 4.0g
Hp Tru64	Version 5.0a
Hp Tru64	Version 5.1
Hp Tru64	Version 5.1af

References (32)

http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html

Source: cve@mitre.org

http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html

Source: cve@mitre.org

http://archives.neohapsis.com/archives/tru64/2002-q3/0019.html

Source: cve@mitre.org

http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_su.txt

Source: cve@mitre.org

Exploit

http://www.kb.cert.org/vuls/id/137555

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

http://www.kb.cert.org/vuls/id/177067

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

http://www.kb.cert.org/vuls/id/193347

Source: cve@mitre.org

PatchUS Government Resource

http://www.kb.cert.org/vuls/id/671627

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

http://www.kb.cert.org/vuls/id/864083

Source: cve@mitre.org

US Government Resource

http://www.securityfocus.com/archive/1/290115

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/5379

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/5380

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/5381

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/5382

Source: cve@mitre.org

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/10614

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/11620

Source: cve@mitre.org

http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html