Hp Hp-Ux vulnerabilities
275 known vulnerabilities affecting hp/hp-ux.
Total CVEs
275
CISA KEV
1
actively exploited
Public exploits
53
Exploited in wild
2
Severity breakdown
CRITICAL42HIGH109MEDIUM96LOW28
Vulnerabilities
Page 13 of 14
CVE-1999-0038HIGHCVSS 8.4PoCv10.00v10.01+7 more1997-04-26
CVE-1999-0038 [HIGH] CWE-120 CVE-1999-0038: Buffer overflow in xlock program allows local users to execute commands as root.
Buffer overflow in xlock program allows local users to execute commands as root.
nvd
CVE-1999-1408LOWCVSS 2.1PoCv9.05v10.01+1 more1997-03-05
CVE-1999-1408 [LOW] CVE-1999-1408: Vulnerability in AIX 4.1.4 and HP-UX 10.01 and 9.05 allows local users to cause a denial of service
Vulnerability in AIX 4.1.4 and HP-UX 10.01 and 9.05 allows local users to cause a denial of service (crash) by using a socket to connect to a port on the localhost, calling shutdown to clear the socket, then using the same socket to connect to a different port on localhost.
nvd
CVE-1999-0318HIGHCVSS 7.2v111997-03-01
CVE-1999-0318 [HIGH] CVE-1999-0318: Buffer overflow in xmcd 2.0p12 allows local users to gain access through an environmental variable.
Buffer overflow in xmcd 2.0p12 allows local users to gain access through an environmental variable.
nvd
CVE-1999-0046CRITICALCVSS 10.0PoCv10.00v10.01+8 more1997-02-06
CVE-1999-0046 [CRITICAL] CWE-120 CVE-1999-0046: Buffer overflow of rlogin program using TERM environmental variable.
Buffer overflow of rlogin program using TERM environmental variable.
nvd
CVE-1999-1160CRITICALCVSS 10.0v9v101997-02-02
CVE-1999-1160 [CRITICAL] CVE-1999-1160: Vulnerability in ftpd/kftpd in HP-UX 10.x and 9.x allows local and possibly remote users to gain roo
Vulnerability in ftpd/kftpd in HP-UX 10.x and 9.x allows local and possibly remote users to gain root privileges.
nvd
CVE-1999-0309HIGHCVSS 7.2v10.00v10.01+3 more1997-02-01
CVE-1999-0309 [HIGH] CVE-1999-0309: HP-UX vgdisplay program gives root access to local users.
HP-UX vgdisplay program gives root access to local users.
nvd
CVE-1999-1144HIGHCVSS 7.2v10.00v10.01+2 more1997-01-30
CVE-1999-1144 [HIGH] CVE-1999-1144: Certain files in MPower in HP-UX 10.x are installed with insecure permissions, which allows local us
Certain files in MPower in HP-UX 10.x are installed with insecure permissions, which allows local users to gain privileges.
nvd
CVE-1999-1088HIGHCVSS 7.2≤ 10.02v9+4 more1997-01-09
CVE-1999-1088 [HIGH] CVE-1999-1088: Vulnerability in chsh command in HP-UX 9.X through 10.20 allows local users to gain privileges.
Vulnerability in chsh command in HP-UX 9.X through 10.20 allows local users to gain privileges.
nvd
CVE-1999-1145HIGHCVSS 7.2≤ 10.20v9+2 more1997-01-07
CVE-1999-1145 [HIGH] CVE-1999-1145: Vulnerability in Glance programs in GlancePlus for HP-UX 10.20 and earlier allows local users to acc
Vulnerability in Glance programs in GlancePlus for HP-UX 10.20 and earlier allows local users to access arbitrary files and gain privileges.
nvd
CVE-1999-1311MEDIUMCVSS 4.6v10.10v10.201997-01-07
CVE-1999-1311 [MEDIUM] CVE-1999-1311: Vulnerability in dtlogin and dtsession in HP-UX 10.20 and 10.10 allows local users to bypass authent
Vulnerability in dtlogin and dtsession in HP-UX 10.20 and 10.10 allows local users to bypass authentication and gain privileges.
nvd
CVE-1999-1249MEDIUMCVSS 4.6v10.201997-01-06
CVE-1999-1249 [MEDIUM] CVE-1999-1249: movemail in HP-UX 10.20 has insecure permissions, which allows local users to gain privileges.
movemail in HP-UX 10.20 has insecure permissions, which allows local users to gain privileges.
nvd
CVE-1999-0517HIGHCVSS 7.5PoCv10v11.001997-01-01
CVE-1999-0517 [HIGH] CVE-1999-0517: An SNMP community name is the default (e.g. public), null, or missing.
An SNMP community name is the default (e.g. public), null, or missing.
nvd
CVE-1999-1251LOWCVSS 2.1v10.10v10.201996-12-24
CVE-1999-1251 [LOW] CVE-1999-1251: Vulnerability in direct audio user space code on HP-UX 10.20 and 10.10 allows local users to cause a
Vulnerability in direct audio user space code on HP-UX 10.20 and 10.10 allows local users to cause a denial of service.
nvd
CVE-1999-1089HIGHCVSS 7.2≤ 10.20v9+1 more1996-12-13
CVE-1999-1089 [HIGH] CVE-1999-1089: Buffer overflow in chfn command in HP-UX 9.X through 10.20 allows local users to gain privileges via
Buffer overflow in chfn command in HP-UX 9.X through 10.20 allows local users to gain privileges via a long command line argument.
nvd
CVE-1999-0129MEDIUMCVSS 4.6v10.00v10.01+3 more1996-12-03
CVE-1999-0129 [MEDIUM] CVE-1999-0129: Sendmail allows local users to write to a file and gain group permissions via a .forward or :include
Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file.
nvd
CVE-1999-0130HIGHCVSS 7.2PoCv10.00v10.01+2 more1996-11-16
CVE-1999-0130 [HIGH] CVE-1999-0130: Local users can start Sendmail in daemon mode and gain root privileges.
Local users can start Sendmail in daemon mode and gain root privileges.
nvd
CVE-1999-1161HIGHCVSS 7.2≤ 10v91996-11-03
CVE-1999-1161 [HIGH] CVE-1999-1161: Vulnerability in ppl in HP-UX 10.x and earlier allows local users to gain root privileges by forcing
Vulnerability in ppl in HP-UX 10.x and earlier allows local users to gain root privileges by forcing ppl to core dump.
nvd
CVE-1999-0311HIGHCVSS 7.2v101996-11-01
CVE-1999-0311 [HIGH] CVE-1999-0311: fpkg2swpk in HP-UX allows local users to gain root access.
fpkg2swpk in HP-UX allows local users to gain root access.
nvd
CVE-1999-0336HIGHCVSS 7.2v101996-11-01
CVE-1999-0336 [HIGH] CVE-1999-0336: Buffer overflow in mstm in HP-UX allows local users to gain root access.
Buffer overflow in mstm in HP-UX allows local users to gain root access.
nvd
CVE-1999-0308MEDIUMCVSS 4.6v8v91996-10-01
CVE-1999-0308 [MEDIUM] CVE-1999-0308: HP-UX gwind program allows users to modify arbitrary files.
HP-UX gwind program allows users to modify arbitrary files.
nvd