CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register   Reset Password   Activate Account
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

HP » Hp-ux : Security Vulnerabilities (CVSS score between 7 and 7.99)

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Copy Results Download Results Select Table
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2009-2682 264 Bypass 2009-09-24 2010-08-21
7.2
 None Local Low Not required Complete Complete Complete
Unspecified vulnerability in Role-Based Access Control (RBAC) in HP HP-UX B.11.23 and B.11.31 allows local users to bypass intended access restrictions via unknown vectors.
2 CVE-2009-2679 DoS 2009-10-05 2010-08-21
7.8
 None Remote Low Not required None None Complete
Unspecified vulnerability in bootpd in HP HP-UX B.11.11, B.11.23, and B.11.31 allows remote attackers to cause a denial of service via unknown attack vectors.
3 CVE-2008-4418 DoS 2008-12-11 2009-01-29
7.8
 None Remote Low Not required None None Complete
Unspecified vulnerability in DCE in HP HP-UX B.11.11, B.11.23, and B.11.31 allows remote attackers to cause a denial of service via unknown vectors.
4 CVE-2008-1664 DoS 2008-08-08 2009-03-04
7.8
 None Remote Low Not required None None Complete
Unspecified vulnerability in libc on HP HP-UX B.11.23 and B.11.31 allows remote attackers to cause a denial of service via unknown vectors.
5 CVE-2007-6419 DoS 2007-12-24 2009-03-04
7.8
 None Remote Low Not required None None Complete
Unspecified vulnerability in rpc.yppasswdd in HP HP-UX B.11.11, B.11.23, and B.11.31 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors.
6 CVE-2007-5946 2007-11-13 2009-03-04
7.2
 None Local Low Not required Complete Complete Complete
Unspecified vulnerability in the Aries PA-RISC emulator on HP-UX B.11.23 and B.11.31 on the IA-64 platform allows local users to obtain unspecified access.
7 CVE-2007-4125 DoS 2007-08-01 2009-03-04
7.1
 None Remote Medium Not required None None Complete
Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport functionality in HP-UX B.11.11, B.11.23, and B.11.31 allows remote attackers to cause an unspecified denial of service via unknown vectors.
8 CVE-2007-0396 DoS 2007-01-19 2009-03-04
7.1
 None Remote Medium Not required None None Complete
Unspecified vulnerability in HP-UX B.11.23, when running IPFilter in combination with PHNE_34474, allows remote attackers to cause a denial of service (system crash) via unspecified vectors.
9 CVE-2006-5091 +Priv 2006-09-29 2009-03-04
7.2
 Admin Local Low Not required Complete Complete Complete
Unspecified vulnerability in HP-UX B.11.11 and B.11.23 CIFS Server (Samba) allows local users to gain privileges or obtain "unauthorized access" via unspecified vectors.
10 CVE-2006-3335 +Priv 2006-07-02 2011-04-12
7.2
 Admin Local Low Not required Complete Complete Complete
Unspecified vulnerability in mkdir in HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows local users to gain privileges via unknown attack vectors.
11 CVE-2006-2574 +Priv 2006-05-24 2009-03-04
7.2
 Admin Local Low Not required Complete Complete Complete
Multiple unspecified vulnerabilities in Software Distributor in HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allow local users to gain privileges via unspecified attack vectors.
12 CVE-2006-1689 2006-04-10 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Unspecified vulnerability in su in HP HP-UX B.11.11, when using the LDAP netgroup feature, allows local users to gain unspecified access.
13 CVE-2006-1389 DoS 2006-03-24 2008-09-05
7.8
 None Remote Low Not required None None Complete
Unspecified vulnerability in swagentd in HP-UX B.11.00, B.11.04, and B.11.11 allows remote attackers to cause a denial of service (application crash) via unspecified vectors.
14 CVE-2006-0436 +Priv 2006-01-26 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Unspecified vulnerability in HP HP-UX B.11.00, B.11.04, and B.11.11 allows local users to gain privileges via unknown attack vectors.
15 CVE-2005-4451 2005-12-21 2009-03-04
7.5
 None Remote Low Not required Partial Partial Partial
Unspecified vulnerability in Software Distributor in HP-UX B.11.11 allows remote attackers to gain access via unspecified attack vectors.
16 CVE-2005-4316 DoS 2005-12-17 2009-03-04
7.8
 None Remote Low Not required None None Complete
HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows remote attackers to cause a denial of service via a "Rose Attack" that involves sending a subset of small IP fragments that do not form a complete, larger packet.
17 CVE-2005-3779 +Priv 2005-11-22 2011-05-19
7.2
 Admin Local Low Not required Complete Complete Complete
Unspecified vulnerability in xterm for HP-UX 11.00, 11.11, and 11.23 allows local users to gain privileges via unknown vectors.
18 CVE-2005-3670 DoS 2005-11-18 2011-09-01
7.8
 None Remote Low Not required None None Complete
Multiple unspecified vulnerabilities in the Internet Key Exchange version 1 (IKEv1) implementation in HP HP-UX B.11.00, B.11.11, and B.11.23 running IPSec, HP Jetdirect 635n IPv6/IPsec Print Server, and HP Tru64 UNIX 5.1B-3 and 5.1B-2/PK4, allow remote attackers to cause a denial of service via certain IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the HP advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.
19 CVE-2005-3565 2005-11-16 2008-09-10
7.5
 User Remote Low Not required Partial Partial Partial
Unknown vulnerability in remshd daemon in HP-UX B.11.00, B.11.11, and B.11.23 while running in "Trusted Mode" allows remote attackers to gain unauthorized system access via unknown attack vectors.
20 CVE-2005-3564 2005-11-16 2012-12-12
7.2
 Admin Local Low Not required Complete Complete Complete
envd daemon in HP-UX B.11.00 through B.11.11 allows local users to obtain privileges via unknown attack vectors.
21 CVE-2005-1771 2005-05-31 2008-09-05
7.5
 User Remote Low Not required Partial Partial Partial
Unknown vulnerability in HP-UX trusted systems B.11.00 through B.11.23 allows remote attackers to gain unauthorized access, possibly involving remshd and/or telnet -t.
22 CVE-2004-2693 264 +Priv 2004-12-31 2009-03-04
7.2
 None Local Low Not required Complete Complete Complete
HP-UX B.11.00 and B.11.11 with B6848AB GTK+ Support Libraries installed uses insecure directory permissions, which allows local users to gain privileges via files in /opt/gnome/src/GLib/.
23 CVE-2004-1764 Overflow +Priv 2004-01-14 2009-03-04
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in CDE libDtSvc on HP-UX B.11.00, B.11.04, B.11.11, and B.11.22 allows local users to gain root privileges via unknown vectors.
24 CVE-2004-1332 Exec Code Overflow 2004-12-31 2009-03-04
7.5
 User Remote Low Not required Partial Partial Partial
Stack-based buffer overflow in the FTP daemon in HP-UX 11.11i, with the -v (debug) option enabled, allows remote attackers to execute arbitrary code via a long command request.
25 CVE-2004-1328 +Priv 2004-12-31 2009-03-04
7.2
 Admin Local Low Not required Complete Complete Complete
Unknown vulnerability in newgrp in HP-UX B.11.00, B.11.04, and B.11.11 allows local users to gain elevated privileges.
26 CVE-2004-0965 Exec Code 2005-02-09 2009-03-04
7.2
 Admin Local Low Not required Complete Complete Complete
stmkfont in HP-UX B.11.00 through B.11.23 relies on the user-specified PATH when executing certain commands, which allows local users to execute arbitrary code by modifying the PATH environment variable to point to malicious programs.
27 CVE-2004-0826 Exec Code Overflow 2004-12-31 2008-09-05
7.5
 User Remote Low Not required Partial Partial Partial
Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2 client hello message.
28 CVE-2003-1461 119 Exec Code Overflow 2003-12-31 2009-03-04
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in rwrite for HP-UX 11.0 could allow local users to execute arbitrary code via a long argument. NOTE: the vendor was unable to reproduce the problem on a system that had been patched for an lp vulnerability (CVE-2002-1473).
29 CVE-2003-1375 119 Exec Code Overflow 2003-12-31 2009-03-04
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in wall for HP-UX 10.20 through 11.11 may allow local users to execute arbitrary code by calling wall with a large file as an argument.
30 CVE-2003-1362 16 2003-12-31 2008-09-05
7.8
 None Remote Low Not required Complete None None
Bastille B.02.00.00 of HP-UX 11.00 and 11.11 does not properly configure the (1) NOVRFY and (2) NOEXPN options in the sendmail.cf file, which could allow remote attackers to verify the existence of system users and expand defined sendmail aliases.
31 CVE-2003-1360 119 Exec Code Overflow 2003-12-31 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in the setupterm function of (1) lanadmin and (2) landiag programs of HP-UX 10.0 through 10.34 allows local users to execute arbitrary code via a long TERM environment variable.
32 CVE-2003-1359 119 Overflow +Priv 2003-12-31 2009-03-04
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in stmkfont utility of HP-UX 10.0 through 11.22 allows local users to gain privileges via a long command line argument.
33 CVE-2003-1358 264 +Priv 2003-12-31 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
rs.F300 for HP-UX 10.0 through 11.22 uses the PATH environment variable to find and execute programs such as rm while operating at raised privileges, which allows local users to gain privileges by modifying the path to point to a malicious rm program.
34 CVE-2003-1356 264 DoS 2003-12-31 2009-03-04
7.2
 Admin Local Low Not required Complete Complete Complete
The "file handling" in sort in HP-UX 10.01 through 10.20, and 11.00 through 11.11 is "incorrect," which allows attackers to gain access or cause a denial of service via unknown vectors.
35 CVE-2003-1098 +Priv 2003-12-31 2009-03-04
7.2
 Admin Local Low Not required Complete Complete Complete
The Xserver for HP-UX 11.22 was not properly built, which introduced a vulnerability that allows local users to gain privileges.
36 CVE-2003-1097 Overflow +Priv 2003-12-31 2009-03-04
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in rexec on HP-UX B.10.20, B.11.00, and B.11.04, when setuid root, may allow local users to gain privileges via a long -l option.
37 CVE-2003-0951 +Priv 2003-12-15 2009-03-04
7.5
 User Remote Low Not required Partial Partial Partial
Partition Manager (parmgr) in HP-UX B.11.23 does not properly validate certificates that are provided by the cimserver, which allows attackers to obtain sensitive data or gain privileges.
38 CVE-2003-0840 Overflow +Priv 2003-11-17 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in dtprintinfo on HP-UX 11.00, and possibly other operating systems, allows local users to gain root privileges via a long DISPLAY environment variable.
39 CVE-2003-0681 Overflow 2003-10-06 2008-09-10
7.5
 User Remote Low Not required Partial Partial Partial
A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.
40 CVE-2003-0333 Overflow +Priv 2003-05-19 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Multiple buffer overflows in kermit in HP-UX 10.20 and 11.00 (C-Kermit 6.0.192 and possibly other versions before 8.0) allow local users to gain privileges via long arguments to (1) ask, (2) askq, (3) define, (4) assign, and (5) getc, some of which may share the same underlying function "doask," a different vulnerability than CVE-2001-0085.
41 CVE-2003-0089 Exec Code Overflow 2003-12-15 2009-03-04
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in the Software Distributor utilities for HP-UX B.11.00 and B.11.11 allows local users to execute arbitrary code via a long LANG environment variable to setuid programs such as (1) swinstall and (2) swmodify.
42 CVE-2003-0064 Exec Code 2003-03-03 2008-09-10
7.5
 User Remote Low Not required Partial Partial Partial
The dtterm terminal emulator allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.
43 CVE-2003-0061 Exec Code Overflow 2002-01-11 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in passwd for HP UX B.10.20 allows local users to execute arbitrary commands with root privileges via a long LANG environment variable.
44 CVE-2003-0028 Exec Code Overflow 2003-03-25 2008-09-10
7.5
 User Remote Low Not required Partial Partial Partial
Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.
45 CVE-2002-2363 264 +Priv 2002-12-31 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
VJE.VJE-RUN in HP-UX 11.00 adds bin to /etc/PATH, which could allow local users to gain privileges.
46 CVE-2002-1618 Bypass 2002-10-16 2009-03-04
7.2
 Admin Local Low Not required Complete Complete Complete
JFS (JFS3.1 and OnlineJFS) in HP-UX 10.20, 11.00, and 11.04 does not properly implement the sticky bit functionality, which could allow attackers to bypass intended restrictions on filesystems.
47 CVE-2002-1615 Exec Code Overflow 2002-09-13 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to execute arbitrary code via (1) msgchk or (2) .upd..loader.
48 CVE-2002-1614 Exec Code Overflow 2002-09-09 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in HP Tru64 UNIX allows local users to execute arbitrary code via a long argument to /usr/bin/at.
49 CVE-2002-1613 Overflow +Priv 2002-09-10 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in ps in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.
50 CVE-2002-1612 Overflow +Priv 2002-09-13 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in mailcv in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.
Total number of vulnerabilities : 108   Page : 1 (This Page)2 3
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.