CVE-2002-1513

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

The UCX POP server in HP TCP/IP services for OpenVMS 4.2 through 5.3 allows local users to truncate arbitrary files via the -logfile command line option, which overrides file system permissions because the server runs with the SYSPRV and BYPASS privileges.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2002-10/0010.htmlPatch, Vendor Advisory
http://archives.neohapsis.com/archives/compaq/2002-q4/0000.html
http://online.securityfocus.com/archive/1/293070Exploit, Patch, Vendor Advisory
http://www.iss.net/security_center/static/10236.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/5790Exploit, Patch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-10/0010.htmlPatch, Vendor Advisory
http://archives.neohapsis.com/archives/compaq/2002-q4/0000.html
http://online.securityfocus.com/archive/1/293070Exploit, Patch, Vendor Advisory
http://www.iss.net/security_center/static/10236.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/5790Exploit, Patch, Vendor Advisory

Timeline

Published: Apr 2, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-15147.2gds_lock_mgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a "isc_init1.X" temporar CVE-2002-15155.0Directory traversal vulnerability in avatar.php in CoolForum 0.5 beta allows remote attackers to read arbitrary files via .. (dot dot) seque CVE-2002-15164.6rpcbind in SGI IRIX, when using the -w command line switch, allows local users to overwrite arbitrary files via a symlink attack.CVE-2002-15174.6fsr_efs in IRIX 6.5 allows local users to conduct unauthorized file activities via a symlink attack, possibly via the .fsrlast file.CVE-2002-15183.6mv in IRIX 6.5 creates a directory with world-writable permissions while moving a directory, which could allow local users to modify files a CVE-2002-151910.0Format string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, allows remote atta CVE-2002-152010.0The CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, does not properly close the SSH connection when a CVE-2002-15212.1Web Server 4D (WS4D) 3.6 stores passwords in plaintext in the Ws4d.4DD file, which allows attackers to gain privileges.CVE-2002-15225.0Buffer overflow in PowerFTP FTP server 2.24, and possibly other versions, allows remote attackers to cause a denial of service and possibly CVE-2002-15235.0Directory traversal vulnerability in Daniel Arenz Mini Server 2.1.6 allows remote attackers to read arbitrary files via (1) ../ (dot-dot sla CVE-2002-15247.5Buffer overflow in XML parser in wsabi.dll of Winamp 3 (1.0.0.488) allows remote attackers to execute arbitrary code via a skin file (.wal) CVE-2002-15255.0Directory traversal vulnerability in ASTAware SearchDisk engine for Sun ONE Starter Kit 2.0 allows remote attackers to read arbitrary files