CVE-2002-1605

CVE-2002-1605 describes a buffer overflow vulnerability in HP Tru64 UNIX versions 5.1a, 5.1, 5.0a, 4.0g, and 4.0f. An attacker can exploit this by providing an excessively long _XKB_CHARSET environment variable to dxpause, dxconsole, or dtsession, leading to arbitrary code execution. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low complexity, and potential for complete compromise of confidentiality, integrity, and availability. While not currently on CISA's KEV catalog, an ExploitDB entry exists (EDB-21774) demonstrating a local buffer overflow, though there is no evidence of active exploitation or significant community discussion.