CVE-2002-1604: HP HP-Ux

High severity, CVSS 7.5. EPSS: 15% chance of exploitation in the next 30 days.

Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to (1) csh, (2) dtsession, (3) dxsysinfo, (4) imapd, (5) inc, (6) uucp, (7) uux, (8) rdist, or (9) deliver.

Affected products

• HP HP-Ux: version 10.20 only; version 11.00 only; version 11.04 only; version 11.11 only; version 11.22 only
• HP TRU64: version 4.0f only; version 4.0g only; version 5.0a only; version 5.1 only; version 5.1a only

Published 2002-09-02. Last modified 2026-06-16.