Multiple Buffer Overflow Vulnerabilities in HP Tru64 UNIX 5.x

CVE-2002-1617

Summary

Multiple buffer overflow vulnerabilities exist in HP Tru64 UNIX 5.x, enabling local users to potentially execute arbitrary code. The vulnerabilities stem from insufficient validation of input parameters, particularly involving the -contextDir argument for dtaction, the -p argument for dtprintinfo, the -customization argument for dxterm, and excessively long DISPLAY environment variables for dtterm. Exploiting these flaws may allow attackers to gain unauthorized access to system resources or execute malicious actions within the affected environment.

References