CVE-2002-1594

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Buffer overflow in (1) grpck and (2) pwck, if installed setuid on a system as recommended in some AIX documentation, may allow local users to gain privileges via a long command line argument.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=vuln-dev&m=100999352406822&w=2
http://marc.info/?l=vulnwatch&m=100998205010794&w=2
http://publib.boulder.ibm.com/infocenter/pseries/topic/com.ibm.aix.doc/cmds/aixcmds2/grpck.htm
http://www.kb.cert.org/vuls/id/121891Third Party Advisory, US Government Resource
http://www.kb.cert.org/vuls/id/877811Third Party Advisory, US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/7857
https://exchange.xforce.ibmcloud.com/vulnerabilities/7859
http://marc.info/?l=vuln-dev&m=100999352406822&w=2
http://marc.info/?l=vulnwatch&m=100998205010794&w=2
http://publib.boulder.ibm.com/infocenter/pseries/topic/com.ibm.aix.doc/cmds/aixcmds2/grpck.htm
http://www.kb.cert.org/vuls/id/121891Third Party Advisory, US Government Resource
http://www.kb.cert.org/vuls/id/877811Third Party Advisory, US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/7857
https://exchange.xforce.ibmcloud.com/vulnerabilities/7859

Timeline

Published: Jan 2, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-15955.0Cisco SN 5420 Storage Router 1.1(5) and earlier allows attackers to read configuration files without authorization.CVE-2002-15965.0Cisco SN 5420 Storage Router 1.1(5) and earlier allows remote attackers to cause a denial of service (router crash) via an HTTP request with CVE-2002-15975.0Cisco SN 5420 Storage Router 1.1(5) and earlier allows remote attackers to cause a denial of service (halt) via a fragmented packet to the G CVE-2002-15984.6Buffer overflows in Computer Associates MLink (CA-MLink) 6.5 and earlier may allow local users to execute arbitrary code via long command li CVE-2002-15997.5DansGuardian before 2.4.5-1 allows remote attackers to bypass content filtering rules via hex-encoded URLs.CVE-2002-16005.0Directory traversal vulnerability in Mike Spice's My Classifieds (classifieds.cgi) before 1.3 allows remote attackers to overwrite arbitrary CVE-2002-16015.1The Connectables feature in Adobe PhotoDeluxe 3.1 prepends the Adobe directory to the CLASSPATH environment variable, which allows applets t CVE-2002-16024.6Buffer overflow in the Braille module for GNU screen 3.9.11, when HAVE_BRAILLE is defined, allows local users to execute arbitrary code.CVE-2002-16035.0GoAhead Web Server 2.1.7 and earlier allows remote attackers to obtain the source code of ASP files via a URL terminated with a /, \, %2f (e CVE-2002-16047.5Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environmen CVE-2002-16057.5Buffer overflow in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code via a long _XKB_CHARSET environm CVE-2002-16064.6Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain privileges via (1) lpc, (2) lpd, (3) lp