CVE-2002-1513: Compaq TCP-IP Services

Medium severity, CVSS 4.6. EPSS: 0.8% chance of exploitation in the next 30 days.

The UCX POP server in HP TCP/IP services for OpenVMS 4.2 through 5.3 allows local users to truncate arbitrary files via the -logfile command line option, which overrides file system permissions because the server runs with the SYSPRV and BYPASS privileges.

Affected products

• Compaq TCP-IP Services: version 4.2 only; version 5.0a only; version 5.1 only; version 5.3 only

Published 2003-04-02. Last modified 2026-06-16.