Hp Hp-Ux vulnerabilities

CVE-2002-2138 [MEDIUM] CVE-2002-2138: RFC-NETBIOS in HP Advanced Server/9000 B.04.05 through B.04.09, when running HP-UX 11.00 or 11.11, a RFC-NETBIOS in HP Advanced Server/9000 B.04.05 through B.04.09, when running HP-UX 11.00 or 11.11, allows remote attackers to cause a denial of service (panic) via a malformed UDP packet on port 139.

CVE-2023-30903 [MEDIUM] CWE-770 CVE-2023-30903: HP-UX could be exploited locally to create a Denial of Service (DoS) when any physical interface is HP-UX could be exploited locally to create a Denial of Service (DoS) when any physical interface is configured with IPv6/inet6.

CVE-2007-5302 [MEDIUM] CWE-79 CVE-2007-5302: Multiple cross-site scripting (XSS) vulnerabilities in HP System Management Homepage (SMH) in HP-UX Multiple cross-site scripting (XSS) vulnerabilities in HP System Management Homepage (SMH) in HP-UX B.11.11, B.11.23, and B.11.31, and SMH before 2.1.10 for Linux and Windows, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVE-2001-0551 [HIGH] CVE-2001-0551: Buffer overflow in CDE Print Viewer (dtprintinfo) allows local users to execute arbitrary code by co Buffer overflow in CDE Print Viewer (dtprintinfo) allows local users to execute arbitrary code by copying text from the clipboard into the Help window.

CVE-2000-0078 [HIGH] CVE-2000-0078: The June 1999 version of the HP-UX aserver program allows local users to gain privileges by specifyi The June 1999 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the awk command.

CVE-1999-1144 [HIGH] CVE-1999-1144: Certain files in MPower in HP-UX 10.x are installed with insecure permissions, which allows local us Certain files in MPower in HP-UX 10.x are installed with insecure permissions, which allows local users to gain privileges.

CVE-2003-1356 [HIGH] CWE-264 CVE-2003-1356: The "file handling" in sort in HP-UX 10.01 through 10.20, and 11.00 through 11.11 is "incorrect," wh The "file handling" in sort in HP-UX 10.01 through 10.20, and 11.00 through 11.11 is "incorrect," which allows attackers to gain access or cause a denial of service via unknown vectors.

CVE-2000-0095 [MEDIUM] CVE-2000-0095: The PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU generates The PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU generates large amounts of traffic in response to small packets, allowing remote attackers to cause the system to be used as a packet amplifier.

CVE-1999-0324 [HIGH] CVE-1999-0324: ppl program in HP-UX allows local users to create root files through symlinks. ppl program in HP-UX allows local users to create root files through symlinks.

CVE-1999-0325 [HIGH] CVE-1999-0325: vhe_u_mnt program in HP-UX allows local users to create root files through symlinks. vhe_u_mnt program in HP-UX allows local users to create root files through symlinks.

CVE-2013-6200 [MEDIUM] CVE-2013-6200: Unspecified vulnerability in m4 in HP HP-UX B.11.23 and B.11.31 allows local users to obtain sensiti Unspecified vulnerability in m4 in HP HP-UX B.11.23 and B.11.31 allows local users to obtain sensitive information or modify data via unknown vectors.

CVE-2002-2262 [MEDIUM] CVE-2002-2262: Unspecified vulnerability in xntpd of HP-UX 10.20 through 11.11 allows remote attackers to cause a d Unspecified vulnerability in xntpd of HP-UX 10.20 through 11.11 allows remote attackers to cause a denial of service (hang) via unknown attack vectors.

CVE-2002-1606 [MEDIUM] CVE-2002-1606: Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain privileges via (1) lpc, (2) lpd, (3) lpq, (4) lpr, or (5) lprm.

CVE-2002-1406 [HIGH] CVE-2002-1406: Unknown vulnerability in passwd for VVOS HP-UX 11.04, with unknown impact, related to "Unexpected be Unknown vulnerability in passwd for VVOS HP-UX 11.04, with unknown impact, related to "Unexpected behavior."

CVE-2005-0547 [MEDIUM] CVE-2005-0547: Unknown vulnerability in ftpd on HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23 allows remote Unknown vulnerability in ftpd on HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23 allows remote authenticated users to gain "unauthorized access to files."

CVE-2000-1031 [MEDIUM] CVE-2000-1031: Buffer overflow in dtterm in HP-UX 11.0 and HP Tru64 UNIX 4.0f through 5.1a allows local users to ex Buffer overflow in dtterm in HP-UX 11.0 and HP Tru64 UNIX 4.0f through 5.1a allows local users to execute arbitrary code via a long -tn option.

CVE-2002-0585 [MEDIUM] CVE-2002-0585: Unknown vulnerability in ndd for HP-UX 11.11 with certain TRANSPORT patches allows attackers to caus Unknown vulnerability in ndd for HP-UX 11.11 with certain TRANSPORT patches allows attackers to cause a denial of service.

CVE-1999-0479 [MEDIUM] CVE-1999-0479: Denial of service Netscape Enterprise Server with VirtualVault on HP-UX VVOS systems. Denial of service Netscape Enterprise Server with VirtualVault on HP-UX VVOS systems.

CVE-2000-0251 [MEDIUM] CVE-2000-0251: HP-UX 11.04 VirtualVault (VVOS) sends data to unprivileged processes via an interface that has multi HP-UX 11.04 VirtualVault (VVOS) sends data to unprivileged processes via an interface that has multiple aliased IP addresses.

CVE-2014-7877 [MEDIUM] CVE-2014-7877: Unspecified vulnerability in the kernel in HP HP-UX B.11.31 allows local users to cause a denial of Unspecified vulnerability in the kernel in HP HP-UX B.11.31 allows local users to cause a denial of service via unknown vectors.