Vulnerabilities (CVE)

Filtered by vendor Hp Subscribe
Filtered by product Hp-ux
Total 465 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-1999-1251 1 Hp 1 Hp-ux 2023-12-10 2.1 LOW N/A
Vulnerability in direct audio user space code on HP-UX 10.20 and 10.10 allows local users to cause a denial of service.
CVE-1999-0707 1 Hp 2 Hp-ux, Visualize Conference Ftp 2023-12-10 7.5 HIGH N/A
The default FTP configuration in HP Visualize Conference allows conference users to send a file to other participants without authorization.
CVE-2004-0081 23 4d, Apple, Avaya and 20 more 66 Webstar, Mac Os X, Mac Os X Server and 63 more 2023-12-10 5.0 MEDIUM N/A
OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.
CVE-2001-0978 1 Hp 1 Hp-ux 2023-12-10 7.5 HIGH N/A
login in HP-UX 10.26 does not record failed login attempts in /var/adm/btmp, which could allow attackers to conduct brute force password guessing attacks without being detected or observed using the lastb program.
CVE-2000-1031 1 Hp 2 Hp-ux, Tru64 2023-12-10 4.6 MEDIUM N/A
Buffer overflow in dtterm in HP-UX 11.0 and HP Tru64 UNIX 4.0f through 5.1a allows local users to execute arbitrary code via a long -tn option.
CVE-2002-0279 1 Hp 1 Hp-ux 2023-12-10 4.6 MEDIUM N/A
The kernel in HP-UX 11.11 does not properly provide arguments for setrlimit, which could allow local attackers to cause a denial of service (kernel panic) and possibly gain privileges.
CVE-2003-0089 1 Hp 1 Hp-ux 2023-12-10 7.2 HIGH N/A
Buffer overflow in the Software Distributor utilities for HP-UX B.11.00 and B.11.11 allows local users to execute arbitrary code via a long LANG environment variable to setuid programs such as (1) swinstall and (2) swmodify.
CVE-2004-1764 1 Hp 1 Hp-ux 2023-12-10 7.2 HIGH N/A
Buffer overflow in CDE libDtSvc on HP-UX B.11.00, B.11.04, B.11.11, and B.11.22 allows local users to gain root privileges via unknown vectors.
CVE-1999-1573 1 Hp 1 Hp-ux 2023-12-10 10.0 HIGH N/A
Multiple unknown vulnerabilities in the "r-cmnds" (1) remshd, (2) rexecd, (3) rlogind, (4) rlogin, (5) remsh, (6) rcp, (7) rexec, and (8) rdist for HP-UX 10.00 through 11.00 allow attackers to gain privileges or access files.
CVE-2004-0716 1 Hp 1 Hp-ux 2023-12-10 10.0 HIGH N/A
Buffer overflow in the DCE daemon (DCED) for the DCE endpoint mapper (epmap) on HP-UX 11 allows remote attackers to execute arbitrary code via a request with a small fragment length and a large amount of data.
CVE-1999-1135 1 Hp 1 Hp-ux 2023-12-10 7.2 HIGH N/A
Vulnerability in VUE 3.0 in HP 9.x allows local users to gain root privileges, as fixed by PHSS_4994 and PHSS_5438.
CVE-2003-0161 4 Compaq, Hp, Sendmail and 1 more 9 Tru64, Hp-ux, Hp-ux Series 700 and 6 more 2023-12-10 10.0 HIGH N/A
The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers to cause a denial of service and possibly execute arbitrary code via a buffer overflow attack using messages, a different vulnerability than CVE-2002-1337.
CVE-2003-1362 1 Hp 2 Bastille, Hp-ux 2023-12-10 7.8 HIGH N/A
Bastille B.02.00.00 of HP-UX 11.00 and 11.11 does not properly configure the (1) NOVRFY and (2) NOEXPN options in the sendmail.cf file, which could allow remote attackers to verify the existence of system users and expand defined sendmail aliases.
CVE-2002-0678 7 Caldera, Compaq, Hp and 4 more 9 Openunix, Unixware, Tru64 and 6 more 2023-12-10 7.2 HIGH N/A
CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC procedure.
CVE-2003-0694 11 Apple, Compaq, Freebsd and 8 more 18 Mac Os X, Mac Os X Server, Tru64 and 15 more 2023-12-10 10.0 HIGH N/A
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.
CVE-1999-0014 3 Cde, Hp, Ibm 4 Cde, Hp-ux, Vvos and 1 more 2023-12-10 7.2 HIGH N/A
Unauthorized privileged access or denial of service via dtappgather program in CDE.
CVE-1999-0325 1 Hp 1 Hp-ux 2023-12-10 7.2 HIGH N/A
vhe_u_mnt program in HP-UX allows local users to create root files through symlinks.
CVE-2002-1406 1 Hp 1 Hp-ux 2023-12-10 7.2 HIGH N/A
Unknown vulnerability in passwd for VVOS HP-UX 11.04, with unknown impact, related to "Unexpected behavior."
CVE-1999-1239 1 Hp 1 Hp-ux 2023-12-10 4.6 MEDIUM N/A
HP-UX 9.x does not properly enable the Xauthority mechanism in certain conditions, which could allow local users to access the X display even when they have not explicitly been authorized to do so.
CVE-2001-0085 1 Hp 1 Hp-ux 2023-12-10 7.2 HIGH N/A
Buffer overflow in Kermit communications software in HP-UX 11.0 and earlier allows local users to cause a denial of service and possibly execute arbitrary commands.