HP
Product
Hp-ux
On CISA KEVExploited in the wild
290
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 7Medium 5Low 1
Watch
Add Hp-ux to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2004-2753 | – | Dec 31 | Unspecified vulnerability in SharedX in HP-UX B.11.00, B.11.11, and B.11.22 allows local users to access unspecified files or cause a denial of service via unknown vectors related… Affected: 11.00; 11.11; 11.22 |
| CVE-2004-2665 | – | Dec 31 | Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport software in HP-UX B.11.00, B.11.04, and B.11.11 before 20040628 allows local users to cause a… Affected: 11.00; 11.4; 11.11 |
| CVE-2004-1332 | – | Dec 31 | Stack-based buffer overflow in the FTP daemon in HP-UX 11.11i, with the -v (debug) option enabled, allows remote attackers to execute arbitrary code via a long command request Affected: 10.01; 10.10; 10.20; 10.24; 11.00; 11.4; +4 more |
| CVE-2004-1328 | – | Dec 31 | Unknown vulnerability in newgrp in HP-UX B.11.00, B.11.04, and B.11.11 allows local users to gain elevated privileges Affected: 11.00; 11.4; 11.11 |
| CVE-2004-0952 | – | Dec 31 | HP-UX B.11.00 through B.11.23, when running Ignite-UX and using the add_new_client command, causes the TFTP server to set world-writable permissions on part of the directory tree,… Affected: 11.00; 11.11; 11.22; 11.23 |
| CVE-2004-0826 | – | Dec 31 | Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2… Affected: 11.00; 11.11; 11.23 |
| CVE-2004-1375 | – | Dec 23 | Unknown vulnerability in System Administration Manager (SAM) in HP-UX B.11.00, B.11.11, B.11.22, and B.11.23 allows local users to gain privileges Affected: 11.00; 11.4; 11.11; 11.22; 11.23 |
| CVE-2004-0081 | – | Nov 23 | OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the… Affected: 8.05; 11.00; 11.11; 11.23 |
| CVE-2004-0112 | – | Nov 23 | The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake,… Affected: 8.05; 11.00; 11.11; 11.23 |
| CVE-2004-0809 | – | Sep 16 | The mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (child process crash) via a certain sequence of LOCK requests for a location… Affected: 11.00; 11.11; 11.22; 11.23 |
| CVE-2004-0716 | – | Aug 6 | Buffer overflow in the DCE daemon (DCED) for the DCE endpoint mapper (epmap) on HP-UX 11 allows remote attackers to execute arbitrary code via a request with a small fragment… Affected: 11 |
| CVE-2004-0594 | – | Jul 27 | The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to… Affected: b.11.00; b.11.11; b.11.22; b.11.23 |
| CVE-2004-1764 | – | Jan 14 | Buffer overflow in CDE libDtSvc on HP-UX B.11.00, B.11.04, B.11.11, and B.11.22 allows local users to gain root privileges via unknown vectors Affected: 11.00; 11.4; 11.11; 11.22 |
| CVE-2003-1359 | – | Dec 31 | Buffer overflow in stmkfont utility of HP-UX 10.0 through 11.22 allows local users to gain privileges via a long command line argument Affected: 10.00; 10.01; 10.08; 10.09; 10.10; 10.16; +11 more |
| CVE-2003-1461 | – | Dec 31 | Buffer overflow in rwrite for HP-UX 11.0 could allow local users to execute arbitrary code via a long argument Affected: 11.00 |
| CVE-2003-1375 | – | Dec 31 | Buffer overflow in wall for HP-UX 10.20 through 11.11 may allow local users to execute arbitrary code by calling wall with a large file as an argument Affected: 10.20; 11.00; 11.04; 11.11 |
| CVE-2003-1374 | – | Dec 31 | Buffer overflow in disable of HP-UX 11.0 may allow local users to execute arbitrary code via a long argument to the (1) -r or (2)-c options Affected: 11 |
| CVE-2003-1360 | – | Dec 31 | Buffer overflow in the setupterm function of (1) lanadmin and (2) landiag programs of HP-UX 10.0 through 10.34 allows local users to execute arbitrary code via a long TERM… Affected: 10.00; 10.01; 10.08; 10.09; 10.10; 10.16; +5 more |
| CVE-2003-1358 | – | Dec 31 | rs.F300 for HP-UX 10.0 through 11.22 uses the PATH environment variable to find and execute programs such as rm while operating at raised privileges, which allows local users to… Affected: 10.00; 10.01; 10.08; 10.09; 10.10; 10.16; +11 more |
| CVE-2003-1356 | – | Dec 31 | The "file handling" in sort in HP-UX 10.01 through 10.20, and 11.00 through 11.11 is "incorrect," which allows attackers to gain access or cause a denial of service via unknown… Affected: 10.01; 10.10; 10.20; 11.00; 11.04; 11.11 |
| CVE-2003-1098 | – | Dec 31 | The Xserver for HP-UX 11.22 was not properly built, which introduced a vulnerability that allows local users to gain privileges Affected: 11.22 |
| CVE-2003-1097 | – | Dec 31 | Buffer overflow in rexec on HP-UX B.10.20, B.11.00, and B.11.04, when setuid root, may allow local users to gain privileges via a long -l option Affected: 10.10; 10.16; 10.20; 10.24; 10.26; 10.30; +6 more |
| CVE-2003-1087 | – | Dec 31 | Unknown vulnerability in diagmond and possibly other applications in HP9000 Series 700/800 running HP-UX B.11.00, B.11.04, B.11.11, and B.11.22 allows remote attackers to cause a… Affected: 11.00; 11.04; 11.11; 11.22 |
| CVE-2003-0951 | – | Dec 15 | Partition Manager (parmgr) in HP-UX B.11.23 does not properly validate certificates that are provided by the cimserver, which allows attackers to obtain sensitive data or gain… Affected: 11.23 |
| CVE-2003-0914 | – | Dec 15 | ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL… Affected: 11.00; 11.11 |
| CVE-2003-0089 | – | Dec 15 | Buffer overflow in the Software Distributor utilities for HP-UX B.11.00 and B.11.11 allows local users to execute arbitrary code via a long LANG environment variable to setuid… Affected: 11.00; 11.11 |
| CVE-2003-0840 | – | Nov 17 | Buffer overflow in dtprintinfo on HP-UX 11.00, and possibly other operating systems, allows local users to gain root privileges via a long DISPLAY environment variable Affected: 11.00 |
| CVE-2003-0694 | – | Oct 6 | The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c Affected: 11.00; 11.0.4; 11.11; 11.22 |
| CVE-2003-0681 | – | Oct 6 | A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has… Affected: 11.00; 11.0.4; 11.11; 11.22 |
| CVE-2003-0333 | – | May 19 | Multiple buffer overflows in kermit in HP-UX 10.20 and 11.00 (C-Kermit 6.0.192 and possibly other versions before 8.0) allow local users to gain privileges via long arguments to… Affected: 10.20; 11.00 |
| CVE-2003-0201 | – | May 5 | Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers… Affected: 10.01; 10.20; 10.24; 11.00; 11.04; 11.11; +2 more |
| CVE-2003-0196 | – | May 5 | Multiple buffer overflows in Samba before 2.2.8a may allow remote attackers to execute arbitrary code or cause a denial of service, as discovered by the Samba team and a different… Affected: 10.01; 10.20; 10.24; 11.00; 11.04; 11.11; +2 more |
| CVE-2002-1473 | – | Apr 22 | Multiple buffer overflows in lp subsystem for HP-UX 10.20 through 11.11 (11i) allow local users to cause a denial of service and possibly execute arbitrary code Affected: 10.20; 11.00; 11.11 |
| CVE-2002-1409 | – | Apr 11 | ptrace on HP-UX 11.00 through 11.11 allows local users to cause a denial of service (data page fault panic) via "an incorrect reference to thread register state." Affected: 11.00; 11.04; 11.11 |
| CVE-2002-1406 | – | Apr 11 | Unknown vulnerability in passwd for VVOS HP-UX 11.04, with unknown impact, related to "Unexpected behavior." Affected: 11.04 |
| CVE-2003-0161 | – | Apr 2 | The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length… Affected: 10.00; 10.01; 10.08; 10.09; 10.10; 10.16; +10 more |
| CVE-2003-0028 | – | Mar 25 | Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc,… Affected: 10.20; 10.24; 11.00; 11.04; 11.11; 11.20; +1 more |
| CVE-2002-1337 | – | Mar 7 | Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments… Affected: 10.10; 10.20; 11.00; 11.0.4; 11.11; 11.22 |
| CVE-2003-0064 | – | Mar 3 | The dtterm terminal emulator allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's… Affected: 10.20; 10.24; 10.26; 10.30; 10.34; 11.00; +4 more |
| CVE-2002-2138 | – | Dec 31 | RFC-NETBIOS in HP Advanced Server/9000 B.04.05 through B.04.09, when running HP-UX 11.00 or 11.11, allows remote attackers to cause a denial of service (panic) via a malformed UDP… Affected: 11.00; 11.4; 11.11 |
| CVE-2002-2270 | – | Dec 31 | Unspecified vulnerability in the ied command in HP-UX 10.10, 10.20, and 11.0 allows local users to view "normally invisible data" via unknown attack vectors Affected: 10.10; 10.20; 11.00 |
| CVE-2002-2262 | – | Dec 31 | Unspecified vulnerability in xntpd of HP-UX 10.20 through 11.11 allows remote attackers to cause a denial of service (hang) via unknown attack vectors Affected: 10; 10.03; 10.08; 10.09; 10.20; 10.24; +9 more |
| CVE-2002-2363 | – | Dec 31 | VJE.VJE-RUN in HP-UX 11.00 adds bin to /etc/PATH, which could allow local users to gain privileges Affected: 11.00 |
| CVE-2002-1794 | – | Dec 31 | Unknown vulnerability in pam_authz in the LDAP-UX Integration product on HP-UX 11.00 and 11.11 allows remote attackers to execute r-commands with privileges of other users Affected: 11.00; 11.11 |
| CVE-2002-1668 | – | Dec 31 | HP-UX 11.11 and earlier allows local users to cause a denial of service (kernel deadlock), due to a "file system weakness" that is possibly via an mmap() system call and… Affected: 11.00; 11.0.4; 11.11 |
| CVE-2002-1317 | – | Dec 11 | Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (crash) or execute arbitrary… Affected: 10.10; 10.20; 10.24; 11.00; 11.04; 11.11; +1 more |
| CVE-2002-1618 | – | Oct 16 | JFS (JFS3.1 and OnlineJFS) in HP-UX 10.20, 11.00, and 11.04 does not properly implement the sticky bit functionality, which could allow attackers to bypass intended restrictions… Affected: 10.20; 11.00; 11.04 |
| CVE-2002-0992 | – | Oct 4 | Unknown vulnerability in IPV6 functionality for DCE daemons (1) dced or (2) rpcd on HP-UX 11.11 allows attackers to cause a denial of service (crash) via an attack that modifies… Affected: 11.11 |
| CVE-2002-1612 | – | Sep 13 | Buffer overflow in mailcv in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges Affected: 10.20; 11.00; 11.04; 11.11; 11.22 |
| CVE-2002-1615 | – | Sep 13 | Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to execute arbitrary code via (1) msgchk or (2) .upd..loader Affected: 10.20; 11.00; 11.04; 11.11; 11.22 |