{"id":"CVE-2002-1616","aliases":["EUVD-2002-1597","GHSA-p2w3-5f32-h6p6"],"status":"published","title":"Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to...","description":"Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain root privileges via (1) su, (2) chsh, (3) passwd, (4) chfn, (5) dxchpwd, and (6) libc.","severity":{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03895,"percentile":0.90325,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2002-08-01T04:00:00Z","modified":"2026-06-16T21:59:39Z","exploits":[{"source":"exploitdb","id":"EDB-259","title":"Tru64 5 - 'su' Env Local Stack Overflow","type":"local","platform":"tru64","date":"2001-01-26","verified":true,"url":"https://www.exploit-db.com/exploits/259"}],"products":[{"vendor":"hp","product":"tru64"}],"references":[{"url":"http://www.kb.cert.org/vuls/id/177067","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html","tags":["mailing-list","x_refsource_FULLDISC","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_su.txt","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10614","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.kb.cert.org/vuls/id/193347","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5382","tags":["vdb-entry","x_refsource_BID","x_transferred","Patch"]},{"url":"http://www.securityfocus.com/bid/5381","tags":["vdb-entry","x_refsource_BID","x_transferred","Patch"]},{"url":"http://www.kb.cert.org/vuls/id/671627","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11620","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securityfocus.com/bid/5379","tags":["vdb-entry","x_refsource_BID","x_transferred","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/tru64/2002-q3/0019.html","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://www.kb.cert.org/vuls/id/137555","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5380","tags":["vdb-entry","x_refsource_BID","x_transferred","Patch"]},{"url":"http://www.securityfocus.com/archive/1/290115","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/864083","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2002-1616"},{"url":"https://github.com/advisories/GHSA-p2w3-5f32-h6p6"}],"sources":{"cve":[{"id":"CVE-2002-1616","description":"Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain root privileges via (1) su, (2) chsh, (3) passwd, (4) chfn, (5) dxchpwd, and (6) libc.","status":"published","published":"2005-03-25T05:00:00Z","modified":"2024-08-08T03:34:55.053Z","updated_at":"2026-11-02T14:33:54.972584Z"}],"euvd":[{"id":"EUVD-2002-1597","description":"Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain root privileges via (1) su, (2) chsh, (3) passwd, (4) chfn, (5) dxchpwd, and (6) libc.","status":"published","published":"2005-03-25T05:00:00Z","modified":"2024-08-08T03:34:55Z","updated_at":"2026-11-03T01:14:55.321691Z"}],"ghsa":[{"id":"GHSA-p2w3-5f32-h6p6","title":"Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to...","description":"Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain root privileges via (1) su, (2) chsh, (3) passwd, (4) chfn, (5) dxchpwd, and (6) libc.","status":"published","published":"2022-04-30T18:21:31Z","modified":"2023-01-30T05:06:13Z","updated_at":"2026-11-02T14:47:26.771464Z"}],"nvd":[{"id":"CVE-2002-1616","description":"Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain root privileges via (1) su, (2) chsh, (3) passwd, (4) chfn, (5) dxchpwd, and (6) libc.","status":"published","published":"2002-08-01T04:00:00Z","modified":"2026-06-16T21:59:39.77Z","cvss":[{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:42.220505Z"}]}}