CVE-2002-1513

CVSS 4.6 - MEDIUM
Description

The UCX POP server in HP TCP/IP services for OpenVMS 4.2 through 5.3 allows local users to truncate arbitrary files via the -logfile command line option, which overrides file system permissions because the server runs with the SYSPRV and BYPASS privileges.

Affected Products
4
Vendor Product Version
compaq tcp-ip_services 4.2
compaq tcp-ip_services 5.0a
compaq tcp-ip_services 5.1
compaq tcp-ip_services 5.3
Weakness Types
NVD-CWE-Other
CVE Information
CVE ID:
CVE-2002-1513
Published:
2003-04-02
Modified:
2026-04-16
CVSS Score:
4.6
Severity:
MEDIUM
Vector:
AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Vendors
compaq
Quick Actions
CVSS Severity Scale
0.0 - 3.9 LOW
4.0 - 6.9 MEDIUM
7.0 - 8.9 HIGH
9.0 - 10.0 CRITICAL