CVE-2002-1605: Buffer overflow in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code...

Security readout for executives and security teams

This is a legacy HP Tru64 UNIX issue where certain desktop/session utilities can mishandle an overly long _XKB_CHARSET environment variable. If an affected system still exists, successful exploitation could allow arbitrary code execution. The business risk is concentrated in old, high-value UNIX estates that may be hard to patch or monitor. Exposure is likely limited to legacy HP Tru64 UNIX systems running the named versions with the affected X/session binaries installed or reachable by users. Modern Linux, Windows, macOS, and non-Tru64 UNIX systems are not identified as affected in the provided sources. Treat this as a high-priority legacy asset issue, not a broad enterprise emergency. The key decision is whether any affected Tru64 systems remain in production, especially in privileged, shared, or business-critical environments. If they do, validate vendor guidance and isolate or retire them quickly. Mitigation focus: Inventory for HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f systems.; Check HP/Compaq SSRT2275 and CERT advisories for vendor-approved updates or workarounds.; Restrict interactive access to affected legacy hosts until vendor guidance is applied..

Prepared

Jun 29, 2026, 23:12 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.