Hp Hp-Ux vulnerabilities
275 known vulnerabilities affecting hp/hp-ux.
Total CVEs
275
CISA KEV
1
actively exploited
Public exploits
53
Exploited in wild
8
Severity breakdown
CRITICAL42HIGH108MEDIUM97LOW28
Vulnerabilities
Page 8 of 14
CVE-2005-1192P4MEDIUMCVSS 5.0v11.00v11.04+3 more2005-05-02
CVE-2005-1192 [MEDIUM] CVE-2005-1192: Unknown vulnerability in HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23, when running TCP/IP
Unknown vulnerability in HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23, when running TCP/IP on IPv4, allows remote attackers to cause a denial of service via certain packets, related to the PMTU, a different vulnerability than CVE-2004-1060.
nvd
CVE-2001-1256P4LOWCVSS 1.2v11.00v11.04+1 more2001-06-11
CVE-2001-1256 [LOW] CVE-2001-1256: kmmodreg in HP-UX 11.11, 11.04 and 11.00 allows local users to create arbitrary world-writeable file
kmmodreg in HP-UX 11.11, 11.04 and 11.00 allows local users to create arbitrary world-writeable files via a symlink attack on the (1) /tmp/.kmmodreg_lock and (2) /tmp/kmpath.tmp temporary files.
nvd
CVE-2001-0978P4HIGHCVSS 7.5v10.262001-09-03
CVE-2001-0978 [HIGH] CVE-2001-0978: login in HP-UX 10.26 does not record failed login attempts in /var/adm/btmp, which could allow attac
login in HP-UX 10.26 does not record failed login attempts in /var/adm/btmp, which could allow attackers to conduct brute force password guessing attacks without being detected or observed using the lastb program.
nvd
CVE-2004-1764P4HIGHCVSS 7.2v11.00v11.4+2 more2004-01-14
CVE-2004-1764 [HIGH] CVE-2004-1764: Buffer overflow in CDE libDtSvc on HP-UX B.11.00, B.11.04, B.11.11, and B.11.22 allows local users t
Buffer overflow in CDE libDtSvc on HP-UX B.11.00, B.11.04, B.11.11, and B.11.22 allows local users to gain root privileges via unknown vectors.
nvd
CVE-2003-1360P4HIGHCVSS 7.2v10.00v10.01+9 more2003-12-31
CVE-2003-1360 [HIGH] CWE-119 CVE-2003-1360: Buffer overflow in the setupterm function of (1) lanadmin and (2) landiag programs of HP-UX 10.0 thr
Buffer overflow in the setupterm function of (1) lanadmin and (2) landiag programs of HP-UX 10.0 through 10.34 allows local users to execute arbitrary code via a long TERM environment variable.
nvd
CVE-2002-1612P4HIGHCVSS 7.2v10.20v11.00+3 more2002-09-13
CVE-2002-1612 [HIGH] CVE-2002-1612: Buffer overflow in mailcv in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gai
Buffer overflow in mailcv in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.
nvd
CVE-2002-1613P4HIGHCVSS 7.2v10.20v11.00+3 more2002-09-10
CVE-2002-1613 [HIGH] CVE-2002-1613: Buffer overflow in ps in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain pr
Buffer overflow in ps in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.
nvd
CVE-2000-0801P4HIGHCVSS 7.2v10.20v11.002000-10-20
CVE-2000-0801 [HIGH] CVE-2000-0801: Buffer overflow in bdf program in HP-UX 11.00 may allow local users to gain root privileges via a lo
Buffer overflow in bdf program in HP-UX 11.00 may allow local users to gain root privileges via a long -t option.
nvd
CVE-1999-0311P4HIGHCVSS 7.2v101996-11-01
CVE-1999-0311 [HIGH] CVE-1999-0311: fpkg2swpk in HP-UX allows local users to gain root access.
fpkg2swpk in HP-UX allows local users to gain root access.
nvd
CVE-1999-1145P4HIGHCVSS 7.2≤ 10.20v9+2 more1997-01-07
CVE-1999-1145 [HIGH] CVE-1999-1145: Vulnerability in Glance programs in GlancePlus for HP-UX 10.20 and earlier allows local users to acc
Vulnerability in Glance programs in GlancePlus for HP-UX 10.20 and earlier allows local users to access arbitrary files and gain privileges.
nvd
CVE-1999-1146P4HIGHCVSS 7.2≤ 9v81994-05-04
CVE-1999-1146 [HIGH] CVE-1999-1146: Vulnerability in Glance and gpm programs in GlancePlus for HP-UX 9.x and earlier allows local users
Vulnerability in Glance and gpm programs in GlancePlus for HP-UX 9.x and earlier allows local users to access arbitrary files and gain privileges.
nvd
CVE-1999-1134P4HIGHCVSS 7.2v91994-05-18
CVE-1999-1134 [HIGH] CVE-1999-1134: Vulnerability in Vue 3.0 in HP 9.x allows local users to gain root privileges, as fixed by PHSS_4038
Vulnerability in Vue 3.0 in HP 9.x allows local users to gain root privileges, as fixed by PHSS_4038, PHSS_4055, and PHSS_4066.
nvd
CVE-1999-1135P4HIGHCVSS 7.2v91994-04-20
CVE-1999-1135 [HIGH] CVE-1999-1135: Vulnerability in VUE 3.0 in HP 9.x allows local users to gain root privileges, as fixed by PHSS_4994
Vulnerability in VUE 3.0 in HP 9.x allows local users to gain root privileges, as fixed by PHSS_4994 and PHSS_5438.
nvd
CVE-2001-0266P4HIGHCVSS 7.2≤ 11.002001-05-03
CVE-2001-0266 [HIGH] CVE-2001-0266: Vulnerability in Software Distributor SD-UX in HP-UX 11.0 and earlier allows local users to gain pri
Vulnerability in Software Distributor SD-UX in HP-UX 11.0 and earlier allows local users to gain privileges.
nvd
CVE-2009-0207P4MEDIUMCVSS 6.8vb.11.11vb.11.31+1 more2009-03-25
CVE-2009-0207 [MEDIUM] CVE-2009-0207: Unspecified vulnerability in HP-UX B.11.11 running VERITAS Oracle Disk Manager (VRTSodm) 3.5, B.11.2
Unspecified vulnerability in HP-UX B.11.11 running VERITAS Oracle Disk Manager (VRTSodm) 3.5, B.11.23 running VRTSodm 4.1 or VERITAS File System (VRTSvxfs) 4.1, B.11.23 running VRTSodm 5.0 or VRTSvxfs 5.0, and B.11.31 running VRTSodm 5.0 allows local users to gain root privileges via unknown vectors.
nvd
CVE-2001-1124P4MEDIUMCVSS 5.0v11.00v11.04+1 more2001-10-01
CVE-2001-1124 [MEDIUM] CVE-2001-1124: rpcbind in HP-UX 11.00, 11.04 and 11.11 allows remote attackers to cause a denial of service (core d
rpcbind in HP-UX 11.00, 11.04 and 11.11 allows remote attackers to cause a denial of service (core dump) via a malformed RPC portmap requests, possibly related to a buffer overflow.
nvd
CVE-2005-0364P4MEDIUMCVSS 5.0v11.00v11.11+1 more2005-02-10
CVE-2005-0364 [MEDIUM] CVE-2005-0364: Unknown vulnerability in BIND 9.2.0 in HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers t
Unknown vulnerability in BIND 9.2.0 in HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to cause a denial of service.
nvd
CVE-2007-0396P4HIGHCVSS 7.1v11.232007-01-19
CVE-2007-0396 [HIGH] CVE-2007-0396: Unspecified vulnerability in HP-UX B.11.23, when running IPFilter in combination with PHNE_34474, al
Unspecified vulnerability in HP-UX B.11.23, when running IPFilter in combination with PHNE_34474, allows remote attackers to cause a denial of service (system crash) via unspecified vectors.
nvd
CVE-2003-0914P4MEDIUMCVSS 4.3v11.00v11.112003-12-15
CVE-2003-0914 [MEDIUM] CVE-2003-0914: ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via
ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value.
nvd
CVE-2010-0451P4MEDIUMCVSS 4.0v11.31vb.11.312010-03-29
CVE-2010-0451 [MEDIUM] CWE-264 CVE-2010-0451: The installation process for NFS/ONCplus B.11.31_08 and earlier on HP HP-UX B.11.31 changes the NFS_
The installation process for NFS/ONCplus B.11.31_08 and earlier on HP HP-UX B.11.31 changes the NFS_SERVER setting in the nfsconf file, which might allow remote attackers to obtain filesystem access via NFS requests.
nvd