CVE-2003-0061

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Buffer overflow in passwd for HP UX B.10.20 allows local users to execute arbitrary commands with root privileges via a long LANG environment variable.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published: Jan 11, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2003

CVE-2003-00627.2Buffer overflow in Eset Software NOD32 for UNIX before 1.013 allows local users to execute arbitrary code via a long path name.CVE-2003-00637.3The xterm terminal emulator in XFree86 4.2.0 and earlier allows attackers to modify the window title via a certain character escape sequence CVE-2003-00647.5The dtterm terminal emulator allows attackers to modify the window title via a certain character escape sequence and then insert it back to CVE-2003-00657.5The uxterm terminal emulator allows attackers to modify the window title via a certain character escape sequence and then insert it back to CVE-2003-00667.5The rxvt terminal emulator 2.7.8 and earlier allows attackers to modify the window title via a certain character escape sequence and then in CVE-2003-00677.5The aterm terminal emulator 0.42 allows attackers to modify the window title via a certain character escape sequence and then insert it back CVE-2003-00687.5The Eterm terminal emulator 0.9.1 and earlier allows attackers to modify the window title via a certain character escape sequence and then i CVE-2003-00697.5The PuTTY terminal emulator 0.53 allows attackers to modify the window title via a certain character escape sequence and then insert it back CVE-2003-00706.8VTE, as used by default in gnome-terminal terminal emulator 2.2 and as an option in gnome-terminal 2.0, allows attackers to modify the windo CVE-2003-00712.1The DEC UDK processing feature in the xterm terminal emulator in XFree86 4.2.99.4 and earlier allows attackers to cause a denial of service CVE-2003-00725.0The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service CVE-2003-00735.0Double-free vulnerability in mysqld for MySQL before 3.23.55 allows attackers with MySQL access to cause a denial of service (crash) via mys