CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register   Reset Password   Activate Account
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

HP : Security Vulnerabilities Published In 2000

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2000-1065 DoS 2000-12-11 2008-09-05
5.0
None Remote Low Not required None None Partial
Vulnerability in IP implementation of HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service (printer crash) via a malformed packet.
2 CVE-2000-1064 DoS Overflow 2000-12-11 2008-09-05
5.0
None Remote Low Not required None None Partial
Buffer overflow in the LPD service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service.
3 CVE-2000-1063 DoS Overflow 2000-12-11 2008-09-05
5.0
None Remote Low Not required None None Partial
Buffer overflow in the Telnet service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service.
4 CVE-2000-1062 DoS Overflow 2000-12-11 2008-09-05
5.0
None Remote Low Not required None None Partial
Buffer overflow in the FTP service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service.
5 CVE-2000-1058 DoS Exec Code Overflow 2000-12-11 2008-09-05
5.0
None Remote Low Not required None None Partial
Buffer overflow in OverView5 CGI program in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, in the SNMP service (snmp.exe), aka the "Java SNMP MIB Browser Object ID parsing problem."
6 CVE-2000-1057 +Priv 2000-12-11 2008-09-05
4.6
None Local Low Not required Partial Partial Partial
Vulnerabilities in database configuration scripts in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows local users to gain privileges, possibly via insecure permissions.
7 CVE-2000-1031 Exec Code Overflow 2000-12-11 2008-09-05
4.6
None Local Low Not required Partial Partial Partial
Buffer overflow in dtterm in HP-UX 11.0 and HP Tru64 UNIX 4.0f through 5.1a allows local users to execute arbitrary code via a long -tn option.
8 CVE-2000-1028 Overflow +Priv 2000-12-11 2008-09-05
7.2
Admin Local Low Not required Complete Complete Complete
Buffer overflow in cu program in HP-UX 11.0 may allow local users to gain privileges via a long -l command line argument.
9 CVE-2000-0972 2000-12-19 2008-09-05
2.1
None Local Low Not required Partial None None
HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target file during the crontab session, quitting the session, and reading the error messages that crontab generates.
10 CVE-2000-0966 Overflow +Priv 2000-12-19 2008-09-05
4.6
User Local Low Not required Partial Partial Partial
Buffer overflows in lpspooler in the fileset PrinterMgmt.LP-SPOOL of HP-UX 11.0 and earlier allows local users to gain privileges.
11 CVE-2000-0965 DoS 2000-12-19 2008-09-05
5.0
None Remote Low Not required None None Partial
The NSAPI plugins for TGA and the Java Servlet proxy in HP-UX VVOS 10.24 and 11.04 allows an attacker to cause a denial of service (high CPU utilization).
12 CVE-2000-0801 Overflow +Priv 2000-10-20 2008-09-05
7.2
Admin Local Low Not required Complete Complete Complete
Buffer overflow in bdf program in HP-UX 11.00 may allow local users to gain root privileges via a long -t option.
13 CVE-2000-0755 +Priv 2000-10-20 2008-09-05
4.6
User Local Low Not required Partial Partial Partial
Vulnerability in the newgrp command in HP-UX 11.00 allows local users to gain privileges.
14 CVE-2000-0754 2000-10-20 2008-09-05
2.1
None Local Low Not required None Partial None
Vulnerability in HP OpenView Network Node Manager (NMM) version 6.1 related to passwords.
15 CVE-2000-0730 +Priv 2000-10-20 2008-09-05
4.6
User Local Low Not required Partial Partial Partial
Vulnerability in newgrp command in HP-UX 11.0 allows local users to gain privileges.
16 CVE-2000-0702 2000-10-20 2008-09-05
7.2
Admin Local Low Not required Complete Complete Complete
The net.init rc script in HP-UX 11.00 (S008net.init) allows local users to overwrite arbitrary files via a symlink attack that points from /tmp/stcp.conf to the targeted file.
17 CVE-2000-0699 DoS Exec Code 2000-10-20 2008-09-05
10.0
Admin Remote Low Not required Complete Complete Complete
Format string vulnerability in ftpd in HP-UX 10.20 allows remote attackers to cause a denial of service or execute arbitrary commands via format strings in the PASS command.
18 CVE-2000-0636 DoS 2000-07-19 2008-09-05
5.0
None Remote Low Not required None None Partial
HP JetDirect printers versions G.08.20 and H.08.20 and earlier allow remote attackers to cause a denial of service via a malformed FTP quote command.
19 CVE-2000-0616 +Priv 2000-06-26 2008-09-10
4.6
User Local Low Not required Partial Partial Partial
Vulnerability in HP TurboIMAGE DBUTIL allows local users to gain additional privileges via DBUTIL.PUB.SYS.
20 CVE-2000-0573 Exec Code 2000-07-07 2008-09-10
10.0
Admin Remote Low Not required Complete Complete Complete
The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary commands via the SITE EXEC command.
21 CVE-2000-0558 Exec Code Overflow 2000-06-06 2008-09-10
10.0
Admin Remote Low Not required Complete Complete Complete
Buffer overflow in HP Openview Network Node Manager 6.1 allows remote attackers to execute arbitrary commands via the Alarm service (OVALARMSRV) on port 2345.
22 CVE-2000-0515 +Priv 2000-06-07 2008-09-10
10.0
Admin Remote Low Not required Complete Complete Complete
The snmpd.conf configuration file for the SNMP daemon (snmpd) in HP-UX 11.0 is world writable, which allows local users to modify SNMP configuration or gain privileges.
23 CVE-2000-0468 2000-06-02 2008-09-10
4.6
None Local Low Not required Partial Partial Partial
man in HP-UX 10.20 and 11 allows local attackers to overwrite files via a symlink attack.
24 CVE-2000-0444 DoS 2000-05-24 2008-09-10
5.0
None Remote Low Not required None None Partial
HP Web JetAdmin 6.0 allows remote attackers to cause a denial of service via a malformed URL to port 8000.
25 CVE-2000-0443 2000-05-24 2008-09-10
7.5
User Remote Low Not required Partial Partial Partial
The web interface server in HP Web JetAdmin 5.6 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
26 CVE-2000-0414 +Priv 2000-05-04 2008-09-10
4.6
User Local Low Not required Partial Partial Partial
Vulnerability in shutdown command for HP-UX 11.X and 10.X allows allows local users to gain privileges via malformed input variables.
27 CVE-2000-0251 2000-04-06 2008-09-10
5.0
None Remote Low Not required None Partial None
HP-UX 11.04 VirtualVault (VVOS) sends data to unprivileged processes via an interface that has multiple aliased IP addresses.
28 CVE-2000-0179 DoS 2000-02-28 2008-09-10
5.0
None Remote Low Not required None None Partial
HP OpenView OmniBack 2.55 allows remote attackers to cause a denial of service via a large number of connections to port 5555.
29 CVE-2000-0159 +Priv 2000-02-17 2008-09-10
7.5
User Remote Low Not required Partial Partial Partial
HP Ignite-UX does not save /etc/passwd when it creates an image of a trusted system, which can set the password field to a blank and allow an attacker to gain privileges.
30 CVE-2000-0095 2000-01-24 2008-09-10
5.0
None Remote Low Not required None None Partial
The PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU generates large amounts of traffic in response to small packets, allowing remote attackers to cause the system to be used as a packet amplifier.
31 CVE-2000-0083 DoS +Priv 2000-04-18 2008-09-10
4.6
User Local Low Not required Partial Partial Partial
HP asecure creates the Audio Security File audio.sec with insecure permissions, which allows local users to cause a denial of service or gain additional privileges.
32 CVE-2000-0078 +Priv 2000-01-02 2009-03-04
7.2
Admin Local Low Not required Complete Complete Complete
The June 1999 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the awk command.
33 CVE-2000-0077 +Priv 2000-01-02 2009-03-04
7.2
Admin Local Low Not required Complete Complete Complete
The October 1998 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the ps and grep commands.
34 CVE-1999-0992 Bypass 2000-01-18 2008-09-05
10.0
None Remote Low Not required Complete Complete Complete
HP VirtualVault with the PHSS_17692 patch allows unprivileged processes to bypass access restrictions via the Trusted Gateway Proxy (TGP).
35 CVE-1999-0693 Overflow +Priv 2000-03-02 2008-09-09
7.2
Admin Local Low Not required Complete Complete Complete
Buffer overflow in TT_SESSION environment variable in ToolTalk shared library allows local users to gain root privileges.
36 CVE-1999-0307 Overflow +Priv 2000-12-20 2008-09-09
7.2
Admin Local Low Not required Complete Complete Complete
Buffer overflow in HP-UX cstm program allows local users to gain root privileges.
Total number of vulnerabilities : 36   Page : 1 (This Page)
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.