HP
Product
Hp-ux
On CISA KEVExploited in the wild
290
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 7Medium 5Low 1
Watch
Add Hp-ux to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2002-1613 | – | Sep 10 | Buffer overflow in ps in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges Affected: 10.20; 11.00; 11.04; 11.11; 11.22 |
| CVE-2002-1614 | – | Sep 9 | Buffer overflow in HP Tru64 UNIX allows local users to execute arbitrary code via a long argument to /usr/bin/at Affected: 10.20; 11.00; 11.04; 11.11; 11.22 |
| CVE-2002-0679 | – | Sep 5 | Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to execute arbitrary code via an argument to the… Affected: 10.10; 10.20; 10.24; 11.00; 11.11 |
| CVE-2002-1605 | – | Sep 2 | Buffer overflow in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code via a long _XKB_CHARSET environment variable to (1) dxpause, (2)… Affected: 10.20; 11.00; 11.04; 11.11; 11.22 |
| CVE-2002-1604 | – | Sep 2 | Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to (1) csh, (2) dtsession,… Affected: 10.20; 11.00; 11.04; 11.11; 11.22 |
| CVE-2002-1608 | – | Aug 31 | Buffer overflow in traceroute in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code Affected: 10.20; 11.00; 11.04; 11.11; 11.22 |
| CVE-2002-1607 | – | Aug 31 | Buffer overflow in ypmatch in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code Affected: 10.20; 11.00; 11.04; 11.11; 11.22 |
| CVE-2002-1611 | – | Aug 30 | Buffer overflow in quot in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges Affected: 10.20; 11.00; 11.04; 11.11; 11.22 |
| CVE-2002-1610 | – | Aug 30 | Unknown vulnerability in ping in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to cause a denial of service Affected: 10.20; 11.00; 11.04; 11.11; 11.22 |
| CVE-2002-1609 | – | Aug 30 | Buffer overflow in binmail in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges Affected: 10.20; 11.00; 11.04; 11.11; 11.22 |
| CVE-2002-1606 | – | Aug 30 | Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain privileges via (1) lpc, (2) lpd, (3) lpq, (4) lpr, or (5) lprm Affected: 10.20; 11.00; 11.04; 11.11; 11.22 |
| CVE-2002-0798 | – | Aug 12 | Vulnerability in swinstall for HP-UX 11.00 and 11.11 allows local users to view obtain data views for files that cannot be directly read by the user, which reportedly can be used… Affected: 11.00; 11.11 |
| CVE-2002-0678 | – | Jul 23 | CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC… Affected: 10.10; 10.20; 10.24; 11.00; 11.11 |
| CVE-2002-0677 | – | Jul 23 | CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument… Affected: 10.10; 10.20; 10.24; 11.00; 11.11 |
| CVE-2002-0585 | – | Jun 18 | Unknown vulnerability in ndd for HP-UX 11.11 with certain TRANSPORT patches allows attackers to cause a denial of service Affected: 11.11 |
| CVE-2002-0577 | – | Jun 18 | Vulnerability in passwd for HP-UX 11.00 and 11.11 allows local users to corrupt the password file and cause a denial of service Affected: 11.00; 11.0.4; 11.11 |
| CVE-2002-0279 | – | May 31 | The kernel in HP-UX 11.11 does not properly provide arguments for setrlimit, which could allow local attackers to cause a denial of service (kernel panic) and possibly gain… Affected: 11.11 |
| CVE-2003-0061 | – | Jan 11 | Buffer overflow in passwd for HP UX B.10.20 allows local users to execute arbitrary commands with root privileges via a long LANG environment variable Affected: 10.20 |
| CVE-2001-1564 | – | Dec 31 | setrlimit in HP-UX 10.01, 10.10, 10.24, 10.20, 11.00, 11.04 and 11.11 does not properly enforce core file size on processes after setuid or setgid privileges are dropped, which… Affected: 10.01; 10.10; 10.20; 10.24; 11.00; 11.04; +1 more |
| CVE-2001-1509 | – | Dec 31 | geteuid in Itanium Architecture (IA) running on HP-UX 11.20 does not properly identify a user's effective user id, which could allow local users to gain privileges Affected: 11.20 |
| CVE-2001-1198 | – | Dec 15 | RLPDaemon in HP-UX 10.20 and 11.0 allows local users to overwrite arbitrary files and gain privileges by specifying the target file in the -L option Affected: 10.01; 10.10; 10.20; 11.00; 11.11 |
| CVE-2001-0797 | – | Dec 12 | Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as… Affected: 10.00; 10.01; 10.10; 10.20; 10.24; 11.00; +2 more |
| CVE-2001-0817 | – | Dec 6 | Vulnerability in HP-UX line printer daemon (rlpdaemon) in HP-UX 10.01 through 11.11 allows remote attackers to modify arbitrary files and gain root privileges via a certain print… Affected: 10.01; 10.10; 10.20; 11.00; 11.11 |
| CVE-2001-0809 | – | Dec 6 | Vulnerability in CIFS/9000 Server (SAMBA) A.01.06 and earlier in HP-UX 11.0 and 11.11, when configured as a print server, allows local users to overwrite arbitrary files by… Affected: 11.00; 11.11 |
| CVE-2001-0772 | – | Oct 18 | Buffer overflows and other vulnerabilities in multiple Common Desktop Environment (CDE) modules in HP-UX 10.10 through 11.11 allow attackers to cause a denial of service and… Affected: through 11.11; 10.10 |
| CVE-2001-1124 | – | Oct 1 | rpcbind in HP-UX 11.00, 11.04 and 11.11 allows remote attackers to cause a denial of service (core dump) via a malformed RPC portmap requests, possibly related to a buffer… Affected: 11.00; 11.04; 11.11 |
| CVE-2001-0668 | – | Sep 20 | Buffer overflow in line printer daemon (rlpdaemon) in HP-UX 10.01 through 11.11 allows remote attackers to execute arbitrary commands Affected: 10.01; 10.10; 10.20; 11.00; 11.11 |
| CVE-2001-1136 | – | Sep 13 | The libsecurity library in HP-UX 11.04 (VVOS) allows attackers to cause a denial of service Affected: 11.04 |
| CVE-2001-0979 | – | Sep 3 | Buffer overflow in swverify in HP-UX 11.0, and possibly other programs, allows local users to gain privileges via a long command line argument Affected: 10.01; 10.10; 10.20; 11.00 |
| CVE-2001-0978 | – | Sep 3 | login in HP-UX 10.26 does not record failed login attempts in /var/adm/btmp, which could allow attackers to conduct brute force password guessing attacks without being detected or… Affected: 10.26 |
| CVE-2001-0607 | – | Aug 22 | asecure as included with HP-UX 10.01 through 11.00 can allow a local attacker to create a denial of service and gain additional privileges via unsafe permissions on the asecure… Affected: through 11.00 |
| CVE-2001-1264 | – | Jul 19 | Vulnerability in mkacct in HP-UX 11.04 running Virtualvault Operating System (VVOS) 4.0 and 4.5 allows attackers to elevate privileges Affected: 11.04 |
| CVE-2001-1182 | – | Jul 17 | Vulnerability in login in HP-UX 11.00, 11.11, and 10.20 allows restricted shell users to bypass certain security checks and gain privileges Affected: 10.20; 11.00; 11.11 |
| CVE-2001-1181 | – | Jul 16 | Dynamically Loadable Kernel Module (dlkm) static kernel symbol table in HP-UX 11.11 is not properly configured, which allows local users to gain privileges Affected: 11.11 |
| CVE-2001-1244 | – | Jul 7 | Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small… Affected: 11.00; 11.0.4; 11.11 |
| CVE-2001-0488 | – | Jun 27 | pcltotiff in HP-UX 10.x has unnecessary set group id permissions, which allows local users to cause a denial of service Affected: 10.01; 10.10; 10.20; 10.26 |
| CVE-2001-0379 | – | Jun 18 | Vulnerability in the newgrp program included with HP9000 servers running HP-UX 11.11 allows a local attacker to obtain higher access rights Affected: 11.11 |
| CVE-2001-1256 | – | Jun 11 | kmmodreg in HP-UX 11.11, 11.04 and 11.00 allows local users to create arbitrary world-writeable files via a symlink attack on the (1) /tmp/.kmmodreg_lock and (2) /tmp/kmpath.tmp… Affected: 11.00; 11.04; 11.11 |
| CVE-2001-0311 | – | Jun 2 | Vulnerability in OmniBackII A.03.50 in HP 11.x and earlier allows attackers to gain unauthorized access to an OmniBack client Affected: through 11 |
| CVE-2001-0551 | – | May 22 | Buffer overflow in CDE Print Viewer (dtprintinfo) allows local users to execute arbitrary code by copying text from the clipboard into the Help window Affected: 10.10; 10.20; 10.24; 11.00; 11.04; 11.11 |
| CVE-2001-0266 | – | May 3 | Vulnerability in Software Distributor SD-UX in HP-UX 11.0 and earlier allows local users to gain privileges Affected: through 11.00 |
| CVE-2001-0219 | – | Mar 26 | Vulnerability in Support Tools Manager (xstm,cstm,stm) in HP-UX 11.11 and earlier allows local users to cause a denial of service Affected: through 11.11; 10.20; 11.00 |
| CVE-2001-1439 | – | Feb 16 | Buffer overflow in the text editor functionality in HP-UX 10.01 through 11.04 on HP9000 Series 700 and Series 800 allows local users to cause a denial of service ("system… Affected: 10.01; 10.10; 10.20; 10.24; 11.00; 11.04 |
| CVE-2001-0106 | – | Feb 12 | Vulnerability in inetd server in HP-UX 11.04 and earlier allows attackers to cause a denial of service when the "swait" state is used by a server Affected: through 11.04 |
| CVE-2001-0105 | – | Feb 12 | Vulnerability in top in HP-UX 11.04 and earlier allows local users to overwrite files owned by the "sys" group Affected: 10; 11 |
| CVE-2001-0085 | – | Feb 12 | Buffer overflow in Kermit communications software in HP-UX 11.0 and earlier allows local users to cause a denial of service and possibly execute arbitrary commands Affected: 10.01; 10.10; 10.20; 11.00 |
| CVE-2000-1134 | – | Jan 9 | Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka here-documents or in-here… Affected: 11.11 |
| CVE-2000-1127 | – | Jan 9 | registrar in the HP resource monitor service allows local users to read and modify arbitrary files by renaming the original registrar.log log file and creating a symbolic link to… Affected: 10.20 |
| CVE-2000-1126 | – | Jan 9 | Vulnerability in auto_parms and set_parms in HP-UX 11.00 and earlier allows remote attackers to execute arbitrary commands or cause a denial of service Affected: 10.01; 10.10; 10.20; 10.24; 11.00; 11.4 |
| CVE-1999-0307 | – | Dec 20 | Buffer overflow in HP-UX cstm program allows local users to gain root privileges Affected: 9.00; 10.00 |