CVE-2002-1128

CVE-2002-1128 describes a buffer overflow vulnerability in the inc mail utility affecting Compaq Tru64/OSF1 3.x and Digital Ultrix operating systems. An attacker can exploit this by providing a long MH environment variable, leading to local execution of arbitrary code. With a CVSS score of 7.2, this vulnerability is considered high severity, allowing for complete compromise of confidentiality, integrity, and availability with low attack complexity and no authentication required. While there is no known active exploitation, public exploit code, or Metasploit/Nuclei modules, the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.