CVE-2007-2553
CVE-2007-2553 is a high-severity vulnerability in Hp Tru64 with a CVSS 2.0 base score of 7.2. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: High (CVSS 2.0 base score 7.2)
- EPSS exploit prediction: 1% (57th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Hp Tru64
- Published:
- Last modified:
Description
Unspecified vulnerability in dop in HP Tru64 UNIX 5.1B-4, 5.1B-3, and 5.1A PK6 allows local users to gain privileges via a large amount of data in the environment, as demonstrated by a long environment variable.
Frequently asked questions
- What is CVE-2007-2553?
- Unspecified vulnerability in dop in HP Tru64 UNIX 5.1B-4, 5.1B-3, and 5.1A PK6 allows local users to gain privileges via a large amount of data in the environment, as demonstrated by a long environment variable.
- How severe is CVE-2007-2553?
- CVE-2007-2553 has a CVSS 2.0 base score of 7.2, rated high severity.
- Is CVE-2007-2553 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (57th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2007-2553?
- CVE-2007-2553 primarily affects Hp Tru64. In total, 3 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2007-2553?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
- When was CVE-2007-2553 published?
- CVE-2007-2553 was published on 2007-05-09 and last updated on 2026-06-16.
References
- http://osvdb.org/36203
- http://secunia.com/advisories/25197
- http://www.orkaan.org/tru64/orkaan_-_exp_Tru64-5.X_SSRT071326.html
- http://www.securityfocus.com/archive/1/468103/100/0/threaded
- http://www.securityfocus.com/bid/23881
- http://www.securitytracker.com/id?1018021
- http://www.vupen.com/english/advisories/2007/1715
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34175
- https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c01036871
Affected products (3)
- cpe:2.3:o:hp:tru64:5.1a:pk6:*:*:*:*:*:*
- cpe:2.3:o:hp:tru64:5.1b3:*:*:*:*:*:*:*
- cpe:2.3:o:hp:tru64:5.1b4:*:*:*:*:*:*:*
More vulnerabilities in Hp Tru64
- CVE-2007-2791 — Critical (CVSS 10.0): Unspecified vulnerability in the Secure Shell (SSH) in HP Tru64 UNIX 5.1B-4 and 5.1B-3 allows remote attackers to…
- CVE-2003-1496 — Critical (CVSS 10.0): Unspecified vulnerability in CDE dtmailpr of HP Tru64 4.0F through 5.1B allows local users to gain privileges via…
- CVE-2005-3670 — High (CVSS 7.8): Multiple unspecified vulnerabilities in the Internet Key Exchange version 1 (IKEv1) implementation in HP HP-UX B.11.00,…
- CVE-2002-1604 — High (CVSS 7.5): Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a…
- CVE-2002-1605 — High (CVSS 7.5): Buffer overflow in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code via a long…
- CVE-2008-4414 — High (CVSS 7.2): Unspecified vulnerability in the AdvFS showfile command in HP Tru64 UNIX 5.1B-3 and 5.1B-4 allows local users to gain…