CVE-2002-2002

Published: Dec 31, 2002Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Buffer overflow in libc in Compaq Tru64 4.0F, 5.0, 5.1 and 5.1A allows attackers to execute arbitrary code via long (1) LANG and (2) LOCPATH environment variables.

Affected (4)

Products: Compaq: Tru64

Compaq

1 product

Tru64

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Compaq Tru64	Version 4.0f
Compaq Tru64	Version 5.0
Compaq Tru64	Version 5.1
Compaq Tru64	Version 5.1a

References (10)

http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00219.html

Source: cve@mitre.org

PatchVendor Advisory

http://ftp.support.compaq.com/patches/.new/html/SSRT-541.shtml

Source: cve@mitre.org

http://www.iss.net/security_center/static/8863.php

Source: cve@mitre.org

Patch

http://www.lac.co.jp/security/english/snsadv_e/51_e.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/4544

Source: cve@mitre.org

Patch

http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00219.html