CVE-2002-2002 - Buffer overflow in libc in Compaq Tru64 4.0F, 5.0, 5.1 and 5.1A allows attackers to execute arbitrar

CVE-2002-2002

Summary

Buffer overflow in libc in Compaq Tru64 4.0F, 5.0, 5.1 and 5.1A allows attackers to execute arbitrary code via long (1) LANG and (2) LOCPATH environment variables.

References

Vulnerable Configurations

cpe:2.3:o:compaq:tru64:4.0f:*:*:*:*:*:*:*
cpe:2.3:o:compaq:tru64:4.0f:*:*:*:*:*:*:*
cpe:2.3:o:compaq:tru64:5.0:*:*:*:*:*:*:*
cpe:2.3:o:compaq:tru64:5.0:*:*:*:*:*:*:*
cpe:2.3:o:compaq:tru64:5.1:*:*:*:*:*:*:*
cpe:2.3:o:compaq:tru64:5.1:*:*:*:*:*:*:*
cpe:2.3:o:compaq:tru64:5.1a:*:*:*:*:*:*:*
cpe:2.3:o:compaq:tru64:5.1a:*:*:*:*:*:*:*

CVSS

Base:	7.5 (as of 08-03-2011 - 02:11)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:P/A:P

refmap via4

bid	4544
bugtraq	20020417 [SNS Advisory No.51] Compaq Tru64 UNIX libc Buffer Overflow Vulnerability
compaq	SSRT0771U SSRT541
misc	http://www.lac.co.jp/security/english/snsadv_e/51_e.html
xf	libc-lang-locpath-bo(8863)

Last major update

08-03-2011 - 02:11

Published

31-12-2002 - 05:00

Last modified

08-03-2011 - 02:11