CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register   Reset Password   Activate Account
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

HP : Security Vulnerabilities Published In 1999

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2000-0005 +Priv 1999-01-02 2009-03-04
7.2
Admin Local Low Not required Complete Complete Complete
HP-UX aserver program allows local users to gain privileges via a symlink attack.
2 CVE-1999-1573 +Priv 1999-12-28 2009-03-04
10.0
Admin Remote Low Not required Complete Complete Complete
Multiple unknown vulnerabilities in the "r-cmnds" (1) remshd, (2) rexecd, (3) rlogind, (4) rlogin, (5) remsh, (6) rcp, (7) rexec, and (8) rdist for HP-UX 10.00 through 11.00 allow attackers to gain privileges or access files.
3 CVE-1999-1247 1 +Priv 1999-02-24 2008-09-05
7.2
Admin Local Low Not required Complete Complete Complete
Vulnerability in HP Camera component of HP DCE/9000 in HP-UX 9.x allows attackers to gain root privileges.
4 CVE-1999-1163 1999-11-24 2008-09-10
7.5
User Remote Low Not required Partial Partial Partial
Vulnerability in HP Series 800 S/X/V Class servers allows remote attackers to gain access to the S/X/V Class console via the Service Support Processor (SSP) Teststation.
5 CVE-1999-0829 1999-11-01 2008-09-09
5.0
None Remote Low Not required Partial None None
HP Secure Web Console uses weak encryption.
6 CVE-1999-0707 1999-07-01 2008-09-09
7.5
User Remote Low Not required Partial Partial Partial
The default FTP configuration in HP Visualize Conference allows conference users to send a file to other participants without authorization.
7 CVE-1999-0696 Overflow 1999-07-01 2008-09-09
10.0
Admin Remote Low Not required Complete Complete Complete
Buffer overflow in CDE Calendar Manager Service Daemon (rpc.cmsd).
8 CVE-1999-0690 1999-07-01 2008-09-09
7.2
Admin Local Low Not required Complete Complete Complete
HP CDE program includes the current directory in root's PATH variable.
9 CVE-1999-0688 Overflow 1999-07-01 2008-09-09
4.6
User Local Low Not required Partial Partial Partial
Buffer overflows in HP Software Distributor (SD) for HPUX 10.x and 11.x.
10 CVE-1999-0686 DoS 1999-05-07 2008-09-09
5.0
None Remote Low Not required None None Partial
Denial of service in Netscape Enterprise Server (NES) in HP Virtual Vault (VVOS) via a long URL.
11 CVE-1999-0684 DoS 1999-04-19 2008-09-09
5.0
None Remote Low Not required None None Partial
Denial of service in Sendmail 8.8.6 in HPUX.
12 CVE-1999-0479 DoS 1999-03-01 2008-09-09
5.0
None Remote Low Not required None None Partial
Denial of service Netscape Enterprise Server with VirtualVault on HP-UX VVOS systems.
13 CVE-1999-0447 +Priv 1999-04-01 2013-07-23
4.6
User Local Low Not required Partial Partial Partial
Local users can gain privileges using the debug utility in the MPE/iX operating system.
14 CVE-1999-0436 +Priv 1999-03-01 2008-09-09
4.6
User Local Low Not required Partial Partial Partial
Domain Enterprise Server Management System (DESMS) in HP-UX allows local users to gain privileges.
15 CVE-1999-0435 +Priv 1999-03-01 2008-09-09
7.2
Admin Local Low Not required Complete Complete Complete
MC/ServiceGuard and MC/LockManager in HP-UX allows local users to gain privileges through SAM.
16 CVE-1999-0432 +Priv 1999-03-01 2008-09-09
4.6
User Local Low Not required Partial Partial Partial
ftp on HP-UX 11.00 allows local users to gain privileges.
17 CVE-1999-0353 1999-02-10 2013-09-03
9.3
Admin Remote Medium Not required Complete Complete Complete
rpc.pcnfsd in HP gives remote root access by changing the permissions on the main printer spool directory.
Total number of vulnerabilities : 17   Page : 1 (This Page)
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.