high7.2Public exploit code
CVE-2002-1616
Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain root privileges via (1) su, (2) chsh, (3) passwd, (4) chfn…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Tru64 5 - 'su' Env Local Stack Overflow2001-01-26 · local · tru64 · Verified
Impact
Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain root privileges via (1) su, (2) chsh, (3) passwd, (4) chfn, (5) dxchpwd, and (6) libc.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | Tru64 | Versions 4.0f, 4.0g, 5.0a, 5.1, 5.1af |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html
- http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html
- http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html
- http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html
- http://archives.neohapsis.com/archives/tru64/2002-q3/0019.html
- http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_su.txt
- http://www.kb.cert.org/vuls/id/137555
- http://www.kb.cert.org/vuls/id/177067
- http://www.kb.cert.org/vuls/id/193347
- http://www.kb.cert.org/vuls/id/671627
- http://www.kb.cert.org/vuls/id/864083
- http://www.securityfocus.com/archive/1/290115
- http://www.securityfocus.com/bid/5379
- http://www.securityfocus.com/bid/5380
- http://www.securityfocus.com/bid/5381
- http://www.securityfocus.com/bid/5382
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10614
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11620
- http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html
- http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html
- http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html
- http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html
- http://archives.neohapsis.com/archives/tru64/2002-q3/0019.html
- http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_su.txt
- http://www.kb.cert.org/vuls/id/137555