HP
Product
Hp-ux
On CISA KEVExploited in the wild
290
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 7Medium 5Low 1
Watch
Add Hp-ux to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2012-1823 In wildKEV | 9.8 | May 11 | PHP-CGI Query String Parameter Vulnerability Affected: b.11.23; b.11.31 |
| CVE-2015-5477 In wildKEV | 7.5 | Jul 29 | ISC BIND Data Processing Errors Vulnerability Affected: 11.11; 11.23; 11.31 |
| CVE-2001-0249 | 9.8 | Jun 18 | Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which uses glob to… Affected: 11.00 |
| CVE-2001-0248 | 9.8 | Jun 18 | Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to… Affected: 11.00 |
| CVE-2024-42500 | 9.3 | Sep 9 | HPE has identified a denial of service vulnerability in HPE HP-UX System's Network File System (NFSv4) services Affected: before b.11.31.24 |
| CVE-1999-0038 | 8.4 | Apr 26 | Buffer overflow in xlock program allows local users to execute commands as root Affected: 10.00; 10.01; 10.08; 10.10; 10.16; 10.20; +3 more |
| CVE-2004-0940 | 7.8 | Feb 9 | Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via… Affected: 11.00; 11.11; 11.20; 11.22 |
| CVE-1999-0022 | 7.8 | Jul 3 | Local user gains root privileges via buffer overflow in rdist, via expstr() function Affected: 10.00 |
| CVE-2018-5740 | 7.5 | Jan 16 | A flaw in the "deny-answer-aliases" feature can cause an assertion failure in named Affected: All versions, or not specified |
| CVE-2016-2776 | 7.5 | Sep 28 | buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause… Affected: 11.31 |
| CVE-2004-0079 | 7.5 | Nov 23 | The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake… Affected: 8.05; 11.00; 11.11; 11.23 |
| CVE-2016-2775 | 5.9 | Jul 19 | ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of… Affected: b.11.31 |
| CVE-1999-0517 | 5.9 | Jan 1 | An SNMP community name is the default (e.g Affected: 10; 11.00 |
| CVE-2023-30903 | 5.5 | Jun 16 | HP-UX could be exploited locally to create a Denial of Service (DoS) when any physical interface is configured with IPv6/inet6 Affected: 11.00 through 11.31 |
| CVE-2000-0972 | 5.5 | Dec 19 | HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target file during the crontab session, quitting the session, and… Affected: 11.00 |
| CVE-1999-0524 | 4.0 | Aug 1 | ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts Affected: All versions, or not specified |
| CVE-2015-4000 | 3.7 | May 21 | The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows… Affected: b.11.31 |
| CVE-2015-2126 | – | Jul 6 | Unspecified vulnerability in pppoec in HP HP-UX 11iv2 and 11iv3 allows local users to gain privileges by leveraging setuid permissions Affected: 11.11iv2; 11.11iv3 |
| CVE-2014-7879 | – | Dec 10 | HP HP-UX B.11.11, B.11.23, and B.11.31, when the PAM configuration includes libpam_updbe, allows remote authenticated users to bypass authentication, and consequently execute… Affected: b.11.11; b.11.23; b.11.31 |
| CVE-2014-7877 | – | Oct 30 | Unspecified vulnerability in the kernel in HP HP-UX B.11.31 allows local users to cause a denial of service via unknown vectors Affected: b.11.31 |
| CVE-2014-7874 | – | Oct 19 | Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 3.2.3 on HP-UX B.11.23, and before 3.2.8 on HP-UX B.11.31, allows remote attackers to… Affected: b.11.23; b.11.31 |
| CVE-2014-2490 | – | Jul 17 | Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and SE 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown… Affected: b.11.23; b.11.31 |
| CVE-2013-6209 | – | Mar 14 | Unspecified vulnerability in rpc.lockd in the NFS subsystem in HP HP-UX B.11.11 and B.11.23 allows remote attackers to cause a denial of service via unknown vectors Affected: b.11.11; b.11.23 |
| CVE-2013-6200 | – | Mar 11 | Unspecified vulnerability in m4 in HP HP-UX B.11.23 and B.11.31 allows local users to obtain sensitive information or modify data via unknown vectors Affected: b.11.23; b.11.31 |
| CVE-2013-4854 | – | Jul 29 | The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and… Affected: b.11.31 |
| CVE-2012-0131 | – | Apr 5 | Distributed Computing Environment (DCE) 1.8 and 1.9 on HP HP-UX B.11.11 and B.11.23 allows remote attackers to cause a denial of service or possibly have unspecified other impact… Affected: b.11.11; b.11.23 |
| CVE-2012-0126 | – | Mar 28 | Unspecified vulnerability in the WBEM implementation in HP HP-UX 11.11 and 11.23 allows remote attackers to obtain access to diagnostic information via unknown vectors, a related… Affected: 11.11; 11.23 |
| CVE-2012-0125 | – | Mar 28 | Unspecified vulnerability in the WBEM implementation in HP HP-UX 11.31 allows local users to obtain access to diagnostic information via unknown vectors, a related issue to… Affected: 11.31 |
| CVE-2011-2398 | – | Jul 11 | Unspecified vulnerability in the dynamic loader in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges or cause a denial of service via unknown vectors Affected: b.11.11; b.11.23; b.11.31 |
| CVE-2011-0896 | – | Apr 15 | Unspecified vulnerability in HP NFS/ONCplus B.11.31.10 and earlier on HP-UX B.11.31 allows remote authenticated users to cause a denial of service via unknown vectors Affected: b.11.31 |
| CVE-2011-0891 | – | Apr 3 | Unspecified vulnerability in the OS-Core.CORE2-KRN fileset in HP HP-UX B.11.23 and B.11.31 allows local users to cause a denial of service via unknown vectors Affected: b.11.23; b.11.31 |
| CVE-2010-4108 | – | Dec 8 | HP HP-UX B.11.11, B.11.23, and B.11.31 does not properly support threaded processes, which allows remote authenticated users to cause a denial of service via unspecified vectors Affected: b.11.11; b.11.23; b.11.31 |
| CVE-2010-2712 | – | Aug 30 | Unspecified vulnerability in Software Distributor (sd) in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges via unknown vectors Affected: b.11.11; b.11.23; b.11.31 |
| CVE-2010-1032 | – | Apr 21 | Unspecified vulnerability in HP HP-UX B.11.11 allows local users to cause a denial of service via unknown vectors Affected: b.11.11 |
| CVE-2010-1030 | – | Mar 31 | Unspecified vulnerability in HP-UX B.11.31, with AudFilter rules enabled, allows local users to cause a denial of service via unknown vectors Affected: b.11.31 |
| CVE-2010-0451 | – | Mar 29 | The installation process for NFS/ONCplus B.11.31_08 and earlier on HP HP-UX B.11.31 changes the NFS_SERVER setting in the nfsconf file, which might allow remote attackers to… Affected: 11.31; b.11.31 |
| CVE-2009-2679 | – | Oct 5 | Unspecified vulnerability in bootpd in HP HP-UX B.11.11, B.11.23, and B.11.31 allows remote attackers to cause a denial of service via unknown attack vectors Affected: b.11.11; b.11.23; b.11.31 |
| CVE-2009-2682 | – | Sep 24 | Unspecified vulnerability in Role-Based Access Control (RBAC) in HP HP-UX B.11.23 and B.11.31 allows local users to bypass intended access restrictions via unknown vectors Affected: b.11.23; b.11.31 |
| CVE-2009-0719 | – | Apr 29 | Unspecified vulnerability in useradd in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to access arbitrary files and directories via unknown vectors, a different issue… Affected: b.11.11; b.11.23; b.11.31 |
| CVE-2009-0207 | – | Mar 25 | Unspecified vulnerability in HP-UX B.11.11 running VERITAS Oracle Disk Manager (VRTSodm) 3.5, B.11.23 running VRTSodm 4.1 or VERITAS File System (VRTSvxfs) 4.1, B.11.23 running… Affected: b.11.11; b.11.31; b.11.23 |
| CVE-2009-0418 | – | Feb 4 | The IPv6 Neighbor Discovery Protocol (NDP) implementation in HP HP-UX B.11.11, B.11.23, and B.11.31 does not validate the origin of Neighbor Discovery messages, which allows… Affected: b.11.11; b.11.23; b.11.31 |
| CVE-2008-4418 | – | Dec 11 | Unspecified vulnerability in DCE in HP HP-UX B.11.11, B.11.23, and B.11.31 allows remote attackers to cause a denial of service via unknown vectors Affected: b.11.11; b.11.23; b.11.31 |
| CVE-2008-4416 | – | Dec 5 | Unspecified vulnerability in the kernel in HP HP-UX B.11.31 allows local users to cause a denial of service via unknown vectors Affected: b.11.31 |
| CVE-2008-1668 | – | Aug 13 | ftpd.c in (1) wu-ftpd 2.4.2 and (2) ftpd in HP HP-UX B.11.11 assigns uid 0 to the FTP client in certain operating-system misconfigurations in which PAM authentication can succeed… Affected: 11.11 |
| CVE-2008-1664 | – | Aug 8 | Unspecified vulnerability in libc on HP HP-UX B.11.23 and B.11.31 allows remote attackers to cause a denial of service via unknown vectors Affected: 11.23; 11.31 |
| CVE-2008-1662 | – | Aug 1 | Unspecified vulnerability in the HP System Administration Manager (SAM) on HP-UX B.11.11 and B.11.23, when used to configure NFS, might allow remote attackers to read or modify… Affected: b.11.11; b.11.23 |
| CVE-2008-1660 | – | May 21 | Unspecified vulnerability in useradd on HP-UX B.11.11, B.11.23, and B.11.31 allows local users to access arbitrary files and directories via unspecified vectors Affected: 11.11; 11.23; 11.31 |
| CVE-2008-0713 | – | May 13 | Unspecified vulnerability in the FTP server for HP-UX B.11.11, B.11.23, and B.11.31 allows remote authenticated users to cause a denial of service (FTP server outage) via unknown… Affected: 11.11; 11.23; 11.31 |
| CVE-2007-6425 | – | Jan 23 | Unspecified vulnerability in HP-UX B.11.31, when running ARPA Transport, allows remote attackers to cause a denial of service via unknown vectors Affected: 11.31 |
| CVE-2007-6419 | – | Dec 24 | Unspecified vulnerability in rpc.yppasswdd in HP HP-UX B.11.11, B.11.23, and B.11.31 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors Affected: 11.11; 11.23; 11.31 |
