Hp Hp-Ux vulnerabilities

CVE-2006-1509 [MEDIUM] CVE-2006-1509: /sbin/passwd in HP-UX B.11.00, B.11.11, and B.11.23 before 20060326 "does not recover gracefully fro /sbin/passwd in HP-UX B.11.00, B.11.11, and B.11.23 before 20060326 "does not recover gracefully from some error conditions," which allows local users to cause a denial of service.

CVE-1999-0432 [MEDIUM] CVE-1999-0432: ftp on HP-UX 11.00 allows local users to gain privileges. ftp on HP-UX 11.00 allows local users to gain privileges.

CVE-1999-0436 [MEDIUM] CVE-1999-0436: Domain Enterprise Server Management System (DESMS) in HP-UX allows local users to gain privileges. Domain Enterprise Server Management System (DESMS) in HP-UX allows local users to gain privileges.

CVE-2001-1509 [MEDIUM] CVE-2001-1509: geteuid in Itanium Architecture (IA) running on HP-UX 11.20 does not properly identify a user's effe geteuid in Itanium Architecture (IA) running on HP-UX 11.20 does not properly identify a user's effective user id, which could allow local users to gain privileges.

CVE-1999-1242 [MEDIUM] CVE-1999-1242: Vulnerability in subnetconfig in HP-UX 9.01 and 9.0 allows local users to gain privileges. Vulnerability in subnetconfig in HP-UX 9.01 and 9.0 allows local users to gain privileges.

CVE-1999-1248 [MEDIUM] CVE-1999-1248: Vulnerability in Support Watch (aka SupportWatch) in HP-UX 8.0 through 9.0 allows local users to gai Vulnerability in Support Watch (aka SupportWatch) in HP-UX 8.0 through 9.0 allows local users to gain privileges.

CVE-1999-1213 [MEDIUM] CVE-1999-1213: Vulnerability in telnet service in HP-UX 10.30 allows attackers to cause a denial of service. Vulnerability in telnet service in HP-UX 10.30 allows attackers to cause a denial of service.

CVE-2006-3097 [MEDIUM] CVE-2006-3097: Unspecified vulnerability in Support Tools Manager (xstm, cstm, and stm) on HP-UX B.11.11 and B.11.2 Unspecified vulnerability in Support Tools Manager (xstm, cstm, and stm) on HP-UX B.11.11 and B.11.23 allows local users to cause an unspecified denial of service via unknown vectors.

CVE-2006-3201 [MEDIUM] CVE-2006-3201: Unspecified vulnerability in the kernel in HP-UX B.11.00, B.11.11, and B.11.23 allows local users to Unspecified vulnerability in the kernel in HP-UX B.11.00, B.11.11, and B.11.23 allows local users to cause an unspecified denial of service via unknown vectors.

CVE-1999-0308 [MEDIUM] CVE-1999-0308: HP-UX gwind program allows users to modify arbitrary files. HP-UX gwind program allows users to modify arbitrary files.

CVE-1999-1308 [MEDIUM] CVE-1999-1308: Certain programs in HP-UX 10.20 do not properly handle large user IDs (UID) or group IDs (GID) over Certain programs in HP-UX 10.20 do not properly handle large user IDs (UID) or group IDs (GID) over 60000, which could allow local users to gain privileges.

CVE-2000-0414 [MEDIUM] CVE-2000-0414: Vulnerability in shutdown command for HP-UX 11.X and 10.X allows allows local users to gain privileg Vulnerability in shutdown command for HP-UX 11.X and 10.X allows allows local users to gain privileges via malformed input variables.

CVE-1999-1249 [MEDIUM] CVE-1999-1249: movemail in HP-UX 10.20 has insecure permissions, which allows local users to gain privileges. movemail in HP-UX 10.20 has insecure permissions, which allows local users to gain privileges.

CVE-2004-2753 [MEDIUM] CVE-2004-2753: Unspecified vulnerability in SharedX in HP-UX B.11.00, B.11.11, and B.11.22 allows local users to ac Unspecified vulnerability in SharedX in HP-UX B.11.00, B.11.11, and B.11.22 allows local users to access unspecified files or cause a denial of service via unknown vectors related to handling of "files in a potentially insecure manner."

CVE-2007-0916 [MEDIUM] CVE-2007-0916: Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport functionality i Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport functionality in HP-UX B.11.11 and B.11.23 allows local users to cause an unspecified denial of service via unknown vectors.

CVE-2007-1994 [MEDIUM] CVE-2007-1994: Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport functionality i Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport functionality in HP-UX B.11.00 allows local users to cause a denial of service via unknown vectors. NOTE: due to lack of vendor details, it is not clear whether this is the same as CVE-2007-0916.

CVE-2001-0772 [MEDIUM] CVE-2001-0772: Buffer overflows and other vulnerabilities in multiple Common Desktop Environment (CDE) modules in H Buffer overflows and other vulnerabilities in multiple Common Desktop Environment (CDE) modules in HP-UX 10.10 through 11.11 allow attackers to cause a denial of service and possibly gain additional privileges.

CVE-2001-0607 [MEDIUM] CVE-2001-0607: asecure as included with HP-UX 10.01 through 11.00 can allow a local attacker to create a denial of asecure as included with HP-UX 10.01 through 11.00 can allow a local attacker to create a denial of service and gain additional privileges via unsafe permissions on the asecure program, a different vulnerability than CVE-2000-0083.

CVE-1999-1133 [MEDIUM] CVE-1999-1133: HP-UX 9.x and 10.x running X windows may allow local attackers to gain privileges via (1) vuefile, ( HP-UX 9.x and 10.x running X windows may allow local attackers to gain privileges via (1) vuefile, (2) vuepad, (3) dtfile, or (4) dtpad, which do not authenticate users.

CVE-1999-1238 [MEDIUM] CVE-1999-1238: Vulnerability in CORE-DIAG fileset in HP message catalog in HP-UX 9.05 and earlier allows local user Vulnerability in CORE-DIAG fileset in HP message catalog in HP-UX 9.05 and earlier allows local users to gain privileges.