HP
Product
Hp-ux
On CISA KEVExploited in the wild
290
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 7Medium 5Low 1
Watch
Add Hp-ux to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2007-6195 | – | Dec 15 | Buffer overflow in the sw_rpc_agent_init function in swagentd in Software Distributor (SD), and possibly other DCE applications, in HP HP-UX B.11.11 and B.11.23 allows remote… Affected: 11.11; 11.23 |
| CVE-2007-5946 | – | Nov 14 | Unspecified vulnerability in the Aries PA-RISC emulator on HP-UX B.11.23 and B.11.31 on the IA-64 platform allows local users to obtain unspecified access Affected: 11.23; 11.31 |
| CVE-2007-5536 | – | Oct 18 | Unspecified vulnerability in OpenSSL before A.00.09.07l on HP-UX B.11.11, B.11.23, and B.11.31 allows local users to cause a denial of service via unspecified vectors Affected: 11.11; 11.23; 11.31 |
| CVE-2007-5302 | – | Oct 9 | Multiple cross-site scripting (XSS) vulnerabilities in HP System Management Homepage (SMH) in HP-UX B.11.11, B.11.23, and B.11.31, and SMH before 2.1.10 for Linux and Windows,… Affected: 11.11; 11.23; 11.31 |
| CVE-2007-5008 | – | Sep 20 | The logins command in HP-UX B.11.31, B.11.23, and B.11.11 does not correctly report password status, which allows remote attackers to obtain privileges when certain "password… Affected: 11.11; 11.23; 11.31 |
| CVE-2007-4590 | – | Aug 29 | The get_system_info command in Ignite-UX C.7.0 through C.7.3, and DynRootDisk (DRD) A.1.0.16.417 through A.2.0.0.592, on HP-UX B.11.11, B.11.23, and B.11.31 does not inform local… Affected: 11.11; 11.23; 11.31 |
| CVE-2007-4241 | – | Aug 8 | Buffer overflow in ldcconn in Hewlett-Packard (HP) Controller for Cisco Local Director on HP-UX 11.11i allows remote attackers to execute arbitrary code via a long string to TCP… Affected: 11.11i |
| CVE-2007-4125 | – | Aug 1 | Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport functionality in HP-UX B.11.11, B.11.23, and B.11.31 allows remote attackers to cause an… Affected: 11.11; 11.23; 11.31 |
| CVE-2007-1993 | – | Apr 12 | Buffer overflow in the pfs_mountd.rpc RPC daemon in the Portable File System (PFS) in HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to execute arbitrary code by… Affected: b.11.00; b.11.11; b.11.23 |
| CVE-2007-1994 | – | Apr 12 | Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport functionality in HP-UX B.11.00 allows local users to cause a denial of service via unknown… Affected: 11.00 |
| CVE-2007-0916 | – | Feb 14 | Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport functionality in HP-UX B.11.11 and B.11.23 allows local users to cause an unspecified denial… Affected: 11.11; 11.23 |
| CVE-2007-0915 | – | Feb 14 | Distributed SLS daemon (SLSd) on HP-UX B.11.11 allows remote attackers to overwrite arbitrary files and gain privileges via a crafted RPC request Affected: 11.11 |
| CVE-2007-0394 | – | Jan 19 | HP HP-UX B11.11 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2… Affected: 11.11 |
| CVE-2007-0396 | – | Jan 19 | Unspecified vulnerability in HP-UX B.11.23, when running IPFilter in combination with PHNE_34474, allows remote attackers to cause a denial of service (system crash) via… Affected: 11.23 |
| CVE-2006-5557 | – | Oct 27 | Stack-based buffer overflow in the (1) swpackage and (2) swmodify commands in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via a long -S… Affected: 11.00; 11.4; 11.11 |
| CVE-2006-5556 | – | Oct 27 | Buffer overflow in the localtime_r function, and certain other functions, in libc in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via a… Affected: 11.00; 11.4; 11.11 |
| CVE-2006-5558 | – | Oct 27 | Format string vulnerability in the swask command in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via format string specifiers in the -s… Affected: 11.00; 11.4; 11.11; 11.23 |
| CVE-2006-5452 | – | Oct 23 | Buffer overflow in dtmail on HP Tru64 UNIX 4.0F through 5.1B and HP-UX B.11.00 through B.11.23 allows local users to execute arbitrary code via a long -a (aka attachment) argument Affected: 11.00; 11.4; 11.11; 11.22; 11.23 |
| CVE-2006-5151 | – | Oct 5 | Unspecified vulnerability in HP Ignite-UX server before C.6.9.150 for HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to "gain root access" via unspecified vectors Affected: 11.00; 11.11; 11.23 |
| CVE-2006-5091 | – | Sep 29 | Unspecified vulnerability in HP-UX B.11.11 and B.11.23 CIFS Server (Samba) allows local users to gain privileges or obtain "unauthorized access" via unspecified vectors Affected: 11.11; 11.23 |
| CVE-2006-4820 | – | Sep 15 | Unspecified vulnerability in X.25 on HP-UX B.11.00, B.11.11, and B.11.23 allows local users to cause an unspecified denial of service via unknown vectors Affected: 11.00; 11.11; 11.23 |
| CVE-2006-4795 | – | Sep 14 | Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport software in HP-UX B.11.11 and B.11.23 before 20060912 allows local users to cause a denial of… Affected: 11.11; 11.23 |
| CVE-2006-4188 | – | Aug 17 | Unspecified vulnerability in the LP subsystem in HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows remote attackers to cause a denial of service via unknown vectors Affected: 11.00; 11.4; 11.11; 11.23 |
| CVE-2006-4187 | – | Aug 17 | Unspecified vulnerability in HP-UX B.11.00, B.11.11 and B.11.23, when running in trusted mode, allows local users to cause a denial of service via unspecified vectors Affected: 11.00; 11.11; 11.23 |
| CVE-2006-3335 | – | Jul 3 | Unspecified vulnerability in mkdir in HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows local users to gain privileges via unknown attack vectors Affected: 11.00; 11.4; 11.11; 11.23 |
| CVE-2006-3201 | – | Jun 23 | Unspecified vulnerability in the kernel in HP-UX B.11.00, B.11.11, and B.11.23 allows local users to cause an unspecified denial of service via unknown vectors Affected: 11.00; 11.11; 11.23 |
| CVE-2006-3097 | – | Jun 20 | Unspecified vulnerability in Support Tools Manager (xstm, cstm, and stm) on HP-UX B.11.11 and B.11.23 allows local users to cause an unspecified denial of service via unknown… Affected: 11.11; 11.23 |
| CVE-2006-2574 | – | May 24 | Multiple unspecified vulnerabilities in Software Distributor in HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allow local users to gain privileges via unspecified attack vectors Affected: 11.00; 11.4; 11.11; 11.23 |
| CVE-2006-2551 | – | May 23 | Unspecified vulnerability in the kernel in HP-UX B.11.00 allows local users to cause an unspecified denial of service via unknown vectors Affected: 11.00 |
| CVE-2006-1689 | – | Apr 11 | Unspecified vulnerability in su in HP HP-UX B.11.11, when using the LDAP netgroup feature, allows local users to gain unspecified access Affected: 11.11 |
| CVE-2006-1509 | – | Mar 30 | /sbin/passwd in HP-UX B.11.00, B.11.11, and B.11.23 before 20060326 "does not recover gracefully from some error conditions," which allows local users to cause a denial of service Affected: 11.00; 11.11; 11.23 |
| CVE-2006-1389 | – | Mar 25 | Unspecified vulnerability in swagentd in HP-UX B.11.00, B.11.04, and B.11.11 allows remote attackers to cause a denial of service (application crash) via unspecified vectors Affected: 11.00; 11.4; 11.11 |
| CVE-2006-1248 | – | Mar 17 | Unspecified vulnerability in usermod in HP-UX B.11.00, B.11.11, and B.11.23, when run with certain options that involve a new home directory, might cause usermod to change the… Affected: 11.00; 11.11; 11.23 |
| CVE-2006-0436 | – | Jan 26 | Unspecified vulnerability in HP HP-UX B.11.00, B.11.04, and B.11.11 allows local users to gain privileges via unknown attack vectors Affected: 11.00; 11.4; 11.11 |
| CVE-2005-4451 | – | Dec 21 | Unspecified vulnerability in Software Distributor in HP-UX B.11.11 allows remote attackers to gain access via unspecified attack vectors Affected: 11.11 |
| CVE-2005-4316 | – | Dec 17 | HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows remote attackers to cause a denial of service via a "Rose Attack" that involves sending a subset of small IP fragments that do… Affected: 11.00; 11.4; 11.11; 11.23 |
| CVE-2005-4090 | – | Dec 8 | Unspecified vulnerability in HP-UX B.11.00 to B.11.23, when IPSEC is running, allows remote attackers to have unknown impact Affected: 11.00; 11.11; 11.22; 11.23 |
| CVE-2005-3779 | – | Nov 23 | Unspecified vulnerability in xterm for HP-UX 11.00, 11.11, and 11.23 allows local users to gain privileges via unknown vectors Affected: 11.00; 11.11; 11.23 |
| CVE-2005-3670 | – | Nov 18 | Multiple unspecified vulnerabilities in the Internet Key Exchange version 1 (IKEv1) implementation in HP HP-UX B.11.00, B.11.11, and B.11.23 running IPSec, HP Jetdirect 635n… Affected: 11.00; 11.11; 11.23 |
| CVE-2005-3564 | – | Nov 16 | envd daemon in HP-UX B.11.00 through B.11.11 allows local users to obtain privileges via unknown attack vectors Affected: 11.00; 11.11 |
| CVE-2005-3565 | – | Nov 16 | Unknown vulnerability in remshd daemon in HP-UX B.11.00, B.11.11, and B.11.23 while running in "Trusted Mode" allows remote attackers to gain unauthorized system access via… Affected: 11.00; 11.11; 11.23 |
| CVE-2005-3295 | – | Oct 23 | Unspecified vulnerability in HP-UX B.11.23 on Itanium platforms allows local users to cause a denial of service due to a "specific stack size." Affected: 11.23 |
| CVE-2005-3277 | – | Oct 21 | The LPD service in HP-UX 10.20 11.11 (11i) and earlier allows remote attackers to execute arbitrary code via shell metacharacters ("`" or single backquote) in a request that is… Affected: 10.20; 11.00; 11.11 |
| CVE-2005-2993 | – | Sep 20 | Unspecified vulnerability in the FTP Daemon (ftpd) for HP Tru64 UNIX 4.0F PK8 and other versions up to HP Tru64 UNIX 5.1B-3, and HP-UX B.11.00, B.11.04, B.11.11, and B.11.23,… Affected: 11.00; 11.4; 11.11; 11.23 |
| CVE-2005-1192 | – | May 2 | Unknown vulnerability in HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23, when running TCP/IP on IPv4, allows remote attackers to cause a denial of service via certain… Affected: 11.00; 11.04; 11.11; 11.22; 11.23 |
| CVE-2004-1029 | – | Mar 1 | The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java… Affected: 11.00; 11.11; 11.22; 11.23 |
| CVE-2005-0547 | – | Feb 24 | Unknown vulnerability in ftpd on HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23 allows remote authenticated users to gain "unauthorized access to files." Affected: 11.00; 11.4; 11.11; 11.22; 11.23 |
| CVE-2005-0364 | – | Feb 10 | Unknown vulnerability in BIND 9.2.0 in HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to cause a denial of service Affected: 11.00; 11.11; 11.23 |
| CVE-2004-0965 | – | Feb 9 | stmkfont in HP-UX B.11.00 through B.11.23 relies on the user-specified PATH when executing certain commands, which allows local users to execute arbitrary code by modifying the… Affected: 11.00; 11.11; 11.22; 11.23 |
| CVE-2004-2693 | – | Dec 31 | HP-UX B.11.00 and B.11.11 with B6848AB GTK+ Support Libraries installed uses insecure directory permissions, which allows local users to gain privileges via files in… Affected: 11.00; 11.04; 11.11 |