HP
Product
Hp-ux
On CISA KEVExploited in the wild
290
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 7Medium 5Low 1
Watch
Add Hp-ux to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2000-0966 | – | Dec 19 | Buffer overflows in lpspooler in the fileset PrinterMgmt.LP-SPOOL of HP-UX 11.0 and earlier allows local users to gain privileges Affected: 10.00; 11.00 |
| CVE-2000-1031 | – | Dec 11 | Buffer overflow in dtterm in HP-UX 11.0 and HP Tru64 UNIX 4.0f through 5.1a allows local users to execute arbitrary code via a long -tn option Affected: 10.10; 10.20; 10.24; 11.00; 11.4 |
| CVE-2000-1028 | – | Dec 11 | Buffer overflow in cu program in HP-UX 11.0 may allow local users to gain privileges via a long -l command line argument Affected: 9.00; 9.01; 9.04; 9.05; 9.06; 9.07; +5 more |
| CVE-2000-0801 | – | Oct 20 | Buffer overflow in bdf program in HP-UX 11.00 may allow local users to gain root privileges via a long -t option Affected: 10.20; 11.00 |
| CVE-2000-0730 | – | Oct 20 | Vulnerability in newgrp command in HP-UX 11.0 allows local users to gain privileges Affected: 11.00 |
| CVE-2000-0702 | – | Oct 20 | The net.init rc script in HP-UX 11.00 (S008net.init) allows local users to overwrite arbitrary files via a symlink attack that points from /tmp/stcp.conf to the targeted file Affected: 11.00 |
| CVE-2000-0699 | – | Oct 20 | Format string vulnerability in ftpd in HP-UX 10.20 allows remote attackers to cause a denial of service or execute arbitrary commands via format strings in the PASS command Affected: 10.20; 11.00 |
| CVE-2000-0573 | – | Jul 7 | The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary commands via the SITE… Affected: 11.00 |
| CVE-2000-0515 | – | Jun 7 | The snmpd.conf configuration file for the SNMP daemon (snmpd) in HP-UX 11.0 is world writable, which allows local users to modify SNMP configuration or gain privileges Affected: 10.20; 11.00 |
| CVE-2000-0468 | – | Jun 2 | man in HP-UX 10.20 and 11 allows local attackers to overwrite files via a symlink attack Affected: 10.20; 11.00 |
| CVE-2000-0414 | – | May 4 | Vulnerability in shutdown command for HP-UX 11.X and 10.X allows allows local users to gain privileges via malformed input variables Affected: 10.10; 10.20; 11.00 |
| CVE-2000-0083 | – | Apr 18 | HP asecure creates the Audio Security File audio.sec with insecure permissions, which allows local users to cause a denial of service or gain additional privileges Affected: 10; 11 |
| CVE-2000-0251 | – | Apr 6 | HP-UX 11.04 VirtualVault (VVOS) sends data to unprivileged processes via an interface that has multiple aliased IP addresses Affected: 11.4 |
| CVE-1999-0693 | – | Mar 2 | Buffer overflow in TT_SESSION environment variable in ToolTalk shared library allows local users to gain root privileges Affected: 10; 11 |
| CVE-2000-0159 | – | Feb 17 | HP Ignite-UX does not save /etc/passwd when it creates an image of a trusted system, which can set the password field to a blank and allow an attacker to gain privileges Affected: 11.00 |
| CVE-2000-0095 | – | Jan 24 | The PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU generates large amounts of traffic in response to small packets, allowing remote… Affected: 10.30; 11.00 |
| CVE-2000-0078 | – | Jan 2 | The June 1999 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the awk command Affected: 10; 11 |
| CVE-2000-0077 | – | Jan 2 | The October 1998 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the ps and grep commands Affected: 10; 11 |
| CVE-1999-1573 | – | Dec 28 | Multiple unknown vulnerabilities in the "r-cmnds" (1) remshd, (2) rexecd, (3) rlogind, (4) rlogin, (5) remsh, (6) rcp, (7) rexec, and (8) rdist for HP-UX 10.00 through 11.00 allow… Affected: 10.00; 10.01; 10.10; 10.20; 10.30; 11.00 |
| CVE-1999-0707 | – | Jul 1 | The default FTP configuration in HP Visualize Conference allows conference users to send a file to other participants without authorization Affected: 10.20 |
| CVE-1999-0696 | – | Jul 1 | Buffer overflow in CDE Calendar Manager Service Daemon (rpc.cmsd) Affected: 10.24; 11.00 |
| CVE-1999-0690 | – | Jul 1 | HP CDE program includes the current directory in root's PATH variable Affected: 10 |
| CVE-1999-0688 | – | Jul 1 | Buffer overflows in HP Software Distributor (SD) for HPUX 10.x and 11.x Affected: 10.24; 11.00 |
| CVE-1999-0686 | – | May 7 | Denial of service in Netscape Enterprise Server (NES) in HP Virtual Vault (VVOS) via a long URL Affected: 10.24 |
| CVE-1999-0479 | – | Mar 1 | Denial of service Netscape Enterprise Server with VirtualVault on HP-UX VVOS systems Affected: 10.24 |
| CVE-1999-0436 | – | Mar 1 | Domain Enterprise Server Management System (DESMS) in HP-UX allows local users to gain privileges Affected: 10.20; 11.00 |
| CVE-1999-0435 | – | Mar 1 | MC/ServiceGuard and MC/LockManager in HP-UX allows local users to gain privileges through SAM Affected: 10.00; 10.01; 10.20; 11.00 |
| CVE-1999-0432 | – | Mar 1 | ftp on HP-UX 11.00 allows local users to gain privileges Affected: 11.00 |
| CVE-1999-1247 | – | Feb 24 | Vulnerability in HP Camera component of HP DCE/9000 in HP-UX 9.x allows attackers to gain root privileges Affected: 9 |
| CVE-1999-0353 | – | Feb 10 | rpc.pcnfsd in HP gives remote root access by changing the permissions on the main printer spool directory Affected: 10.01; 10.10; 10.20; 11.00 |
| CVE-2000-0005 | – | Jan 2 | HP-UX aserver program allows local users to gain privileges via a symlink attack Affected: 7.00; 7.02; 7.04; 7.06; 7.08; 8.00; +29 more |
| CVE-1999-0057 | – | Nov 16 | Vacation program allows command execution by remote users through a sendmail command Affected: 9; 10.00; 10.09; 10.24 |
| CVE-1999-0779 | – | Sep 3 | Denial of service in HP-UX SharedX recserv program Affected: 10.01; 10.10; 10.20; 11.00 |
| CVE-1999-0333 | – | Aug 1 | HP OpenView Omniback allows remote execution of commands as root via spoofing, and local users can gain root access via a symlink attack Affected: All versions, or not specified |
| CVE-1999-1136 | – | Jul 30 | Vulnerability in Predictive on HP-UX 11.0 and earlier, and MPE/iX 5.5 and earlier, allows attackers to compromise data transfer for Predictive messages (using e-mail or modem)… Affected: through 11.00 |
| CVE-1999-0008 | – | Jun 8 | Buffer overflow in NIS+, in Sun's rpc.nisd program Affected: 10.34; 11.00 |
| CVE-1999-0003 | – | Apr 1 | Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd) Affected: 10.01; 10.02; 10.03; 11.00 |
| CVE-1999-0502 | – | Mar 1 | A Unix account has a default, null, blank, or missing password Affected: 10.20; 11 |
| CVE-1999-0014 | – | Jan 21 | Unauthorized privileged access or denial of service via dtappgather program in CDE Affected: 10.10; 10.20; 11.00 |
| CVE-1999-0513 | – | Jan 5 | ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service Affected: 10.20; 11.00 |
| CVE-1999-0104 | – | Dec 16 | A later variation on the Teardrop IP denial of service attack, a.k.a Affected: All versions, or not specified |
| CVE-1999-0015 | – | Dec 16 | Teardrop IP denial of service Affected: 9.00; 9.01; 9.03; 9.04; 9.05; 9.07; +7 more |
| CVE-1999-0016 | – | Dec 1 | Land IP denial of service Affected: 9.00; 9.01; 9.03; 9.04; 9.05; 9.07; +8 more |
| CVE-1999-0216 | – | Nov 1 | Denial of service of inetd on Linux through SYN and RST packets Affected: 10 |
| CVE-1999-0097 | – | Oct 29 | The AIX FTP client can be forced to execute commands from a malicious server through shell metacharacters (e.g Affected: 9.00; 9.01; 9.03; 9.04; 9.05; 9.06; +10 more |
| CVE-1999-1213 | – | Oct 1 | Vulnerability in telnet service in HP-UX 10.30 allows attackers to cause a denial of service Affected: 10.30 |
| CVE-1999-0326 | – | Oct 1 | Vulnerability in HP-UX mediainit program Affected: 9; 10.01; 10.10; 10.20; 10.30 |
| CVE-1999-1139 | – | Sep 1 | Character-Terminal User Environment (CUE) in HP-UX 11.0 and earlier allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the… Affected: through 11.00 |
| CVE-1999-1133 | – | Sep 1 | HP-UX 9.x and 10.x running X windows may allow local attackers to gain privileges via (1) vuefile, (2) vuepad, (3) dtfile, or (4) dtpad, which do not authenticate users Affected: 9; 10 |
| CVE-1999-1308 | – | Jul 31 | Certain programs in HP-UX 10.20 do not properly handle large user IDs (UID) or group IDs (GID) over 60000, which could allow local users to gain privileges Affected: 10.20 |