Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to (1) csh (2) dtsession (3) dxsysinfo (4) imapd (5) inc (6) uucp (7) uux (8) rdist or (9) deliver.