HP
Product
Hp-ux
On CISA KEVExploited in the wild
290
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 7Medium 5Low 1
Watch
Add Hp-ux to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-1999-0962 | – | May 14 | Buffer overflow in HPUX passwd command allows local users to gain root privileges via a command line option Affected: 9; 10 |
| CVE-1999-0040 | – | May 1 | Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges Affected: 9.00; 9.01; 9.10; 10.00; 10.01; 10.08; +7 more |
| CVE-1999-1408 | – | Mar 5 | Vulnerability in AIX 4.1.4 and HP-UX 10.01 and 9.05 allows local users to cause a denial of service (crash) by using a socket to connect to a port on the localhost, calling… Affected: 9.05; 10.01; 10.20 |
| CVE-1999-0318 | – | Mar 1 | Buffer overflow in xmcd 2.0p12 allows local users to gain access through an environmental variable Affected: 11 |
| CVE-1999-0046 | – | Feb 6 | Buffer overflow of rlogin program using TERM environmental variable Affected: 10.00; 10.01; 10.08; 10.09; 10.10; 10.16; +4 more |
| CVE-1999-1160 | – | Feb 2 | Vulnerability in ftpd/kftpd in HP-UX 10.x and 9.x allows local and possibly remote users to gain root privileges Affected: 9; 10 |
| CVE-1999-0309 | – | Feb 1 | HP-UX vgdisplay program gives root access to local users Affected: 10.00; 10.01; 10.10; 10.20; 10.24 |
| CVE-1999-1144 | – | Jan 30 | Certain files in MPower in HP-UX 10.x are installed with insecure permissions, which allows local users to gain privileges Affected: 10.00; 10.01; 10.10; 10.20 |
| CVE-1999-1088 | – | Jan 9 | Vulnerability in chsh command in HP-UX 9.X through 10.20 allows local users to gain privileges Affected: through 10.02; 9; 10.00; 10.01; 10.10; 10.20 |
| CVE-1999-1311 | – | Jan 7 | Vulnerability in dtlogin and dtsession in HP-UX 10.20 and 10.10 allows local users to bypass authentication and gain privileges Affected: 10.10; 10.20 |
| CVE-1999-1145 | – | Jan 7 | Vulnerability in Glance programs in GlancePlus for HP-UX 10.20 and earlier allows local users to access arbitrary files and gain privileges Affected: through 10.20; 9; 10.01; 10.10 |
| CVE-1999-1249 | – | Jan 6 | movemail in HP-UX 10.20 has insecure permissions, which allows local users to gain privileges Affected: 10.20 |
| CVE-1999-1251 | – | Dec 24 | Vulnerability in direct audio user space code on HP-UX 10.20 and 10.10 allows local users to cause a denial of service Affected: 10.10; 10.20 |
| CVE-1999-0127 | – | Dec 19 | swinstall and swmodify commands in SD-UX package in HP-UX systems allow local users to create or overwrite arbitrary files to gain root access Affected: All versions, or not specified |
| CVE-1999-1089 | – | Dec 13 | Buffer overflow in chfn command in HP-UX 9.X through 10.20 allows local users to gain privileges via a long command line argument Affected: through 10.20; 9; 10 |
| CVE-1999-0129 | – | Dec 3 | Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file Affected: 10.00; 10.01; 10.10; 10.16; 10.20 |
| CVE-1999-0050 | – | Dec 1 | Buffer overflow in HP-UX newgrp program Affected: 9.00; 9.01; 9.03; 9.04; 9.05; 9.06; +8 more |
| CVE-1999-0130 | – | Nov 16 | Local users can start Sendmail in daemon mode and gain root privileges Affected: 10.00; 10.01; 10.10; 10.20 |
| CVE-1999-1161 | – | Nov 3 | Vulnerability in ppl in HP-UX 10.x and earlier allows local users to gain root privileges by forcing ppl to core dump Affected: through 10; 9 |
| CVE-1999-0336 | – | Nov 1 | Buffer overflow in mstm in HP-UX allows local users to gain root access Affected: 10 |
| CVE-1999-0311 | – | Nov 1 | fpkg2swpk in HP-UX allows local users to gain root access Affected: 10 |
| CVE-1999-0308 | – | Oct 1 | HP-UX gwind program allows users to modify arbitrary files Affected: 8; 9 |
| CVE-1999-0246 | – | Oct 1 | HP Remote Watch allows a remote user to gain root access Affected: All versions, or not specified |
| CVE-1999-0961 | – | Sep 21 | HPUX sysdiag allows local users to gain root privileges via a symlink attack during log file creation Affected: 9.04; 9.05 |
| CVE-1999-0131 | – | Sep 11 | Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users Affected: 10.01; 10.10; 10.20 |
| CVE-1999-0324 | – | Sep 1 | ppl program in HP-UX allows local users to create root files through symlinks Affected: 9; 10.00; 10.01; 10.10; 10.20 |
| CVE-1999-0132 | – | Aug 15 | Expreserve, as used in vi and ex, allows local users to overwrite arbitrary files and gain root access Affected: 9; 10 |
| CVE-1999-0138 | – | Jun 26 | The suidperl and sperl program do not give up root privileges when changing UIDs back to the original users, allowing root access Affected: 8; 9; 10 |
| CVE-1999-1205 | – | Jun 7 | nettune in HP-UX 10.01 and 10.00 is installed setuid root, which allows local users to cause a denial of service by modifying critical networking configuration information Affected: 10.00; 10.01 |
| CVE-1999-0078 | – | Apr 18 | pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call Affected: All versions, or not specified |
| CVE-1999-0325 | – | Dec 1 | vhe_u_mnt program in HP-UX allows local users to create root files through symlinks Affected: 8; 9 |
| CVE-1999-1248 | – | Nov 30 | Vulnerability in Support Watch (aka SupportWatch) in HP-UX 8.0 through 9.0 allows local users to gain privileges Affected: through 9.00; 8.00; 8.02; 8.06 |
| CVE-1999-1238 | – | Sep 21 | Vulnerability in CORE-DIAG fileset in HP message catalog in HP-UX 9.05 and earlier allows local users to gain privileges Affected: through 9.05; 8; 9 |
| CVE-1999-1239 | – | Jul 13 | HP-UX 9.x does not properly enable the Xauthority mechanism in certain conditions, which could allow local users to access the X display even when they have not explicitly been… Affected: 9 |
| CVE-1999-0423 | – | Jun 1 | Vulnerability in hpterm on HP-UX 10.20 allows local users to gain additional privileges Affected: All versions, or not specified |
| CVE-1999-1134 | – | May 18 | Vulnerability in Vue 3.0 in HP 9.x allows local users to gain root privileges, as fixed by PHSS_4038, PHSS_4055, and PHSS_4066 Affected: 9 |
| CVE-1999-1146 | – | May 4 | Vulnerability in Glance and gpm programs in GlancePlus for HP-UX 9.x and earlier allows local users to access arbitrary files and gain privileges Affected: through 9; 8 |
| CVE-1999-1135 | – | Apr 20 | Vulnerability in VUE 3.0 in HP 9.x allows local users to gain root privileges, as fixed by PHSS_4994 and PHSS_5438 Affected: 9 |
| CVE-1999-1242 | – | Feb 7 | Vulnerability in subnetconfig in HP-UX 9.01 and 9.0 allows local users to gain privileges Affected: 9.00; 9.01 |
| CVE-1999-0312 | – | Jan 13 | HP ypbind allows attackers with root privileges to modify NIS data Affected: All versions, or not specified |