CVE-2016-2016

CVE-2016-2016 affects HP-UX 11iv3 with Base-VxFS 5.0/5.0.1/5.1SP1. The issue is in VxFS ACL inheritance where default:class:, default:other:, and default:user: entries can be bypassed via configuration of a parent directory, allowing local users to bypass intended access restrictions. Vulnerable ...

CVE-2016-2016: Improper Access Control

Base-VxFS-50 B.05.00.01 through B.05.00.02, Base-VxFS-501 B.05.01.0 through B.05.01.03, and Base-VxFS-51 B.05.10.00 through B.05.10.02 on HPE HP-UX 11iv3 with VxFS 5.0, VxFS 5.0.1, and VxFS 5.1SP1 mishandles ACL inheritance for default:class: entries, default:other: entries, and default:user:...

CVE-2000-1254

crypto/rsa/rsagen.c in OpenSSL before 0.9.6 mishandles C bitwise-shift operations that exceed the size of an expression, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging improper RSA key generation on 64-bit HP-UX platforms...

CVE-2000-1254

crypto/rsa/rsagen.c in OpenSSL before 0.9.6 mishandles C bitwise-shift operations that exceed the size of an expression, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging improper RSA key generation on 64-bit HP-UX platforms...

CVE-2000-1254

OpenSSL CVE-2000-1254: A vulnerability in crypto/rsa/rsa_gen.c where C bitwise-shift operations that exceed the size of an expression are mishandled, enabling a remote attacker on 64-bit HP-UX to defeat cryptographic protections. Affected: OpenSSL versions before 0.9.6. Impact: potential plaintex...

CVE-2000-1254

crypto/rsa/rsagen.c in OpenSSL before 0.9.6 mishandles C bitwise-shift operations that exceed the size of an expression, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging improper RSA key generation on 64-bit HP-UX platforms...

CVE-2000-1254: Undefined Security Weakness

crypto/rsa/rsagen.c in OpenSSL before 0.9.6 mishandles C bitwise-shift operations that exceed the size of an expression, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging improper RSA key generation on 64-bit HP-UX platforms...

PT-2016-3457

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 0.9.6 Description The issue arises from mishandled C bitwise-shift operations that exceed the size of an expression in OpenSSL, making it easier for remote attackers to defeat cryptographic protection mechanisms. This...

Lynis 2.2.0 - Security Auditing Tool for Unix/Linux Systems

Lynis is an open source security auditing tool. Commonly used by system administrators, security professionals and auditors, to evaluate the security defenses of their Linux/Unix based systems. It runs on the host itself, so it can perform very extensive security scans. Supported operating system...

HPE IPFilter Denial of Service Vulnerability

HPE IPFilter on HP-UX is a system stateful firewall product from Hewlett Packard Enterprise HPE that filters IP packets running on Unix-like operating systems. A security vulnerability exists in version A.11.31.18.21 of HPE IPFilter on HP-UX. When the program is enabled with a specific keep-state...

CVE-2016-1987

HPE IPFilter A.11.31.18.21 on HP-UX, when a certain keep-state configuration is enabled, allows remote attackers to cause a denial of service via unspecified UDP packets...

CVE-2016-1987: Improper Input Validation

HPE IPFilter A.11.31.18.21 on HP-UX, when a certain keep-state configuration is enabled, allows remote attackers to cause a denial of service via unspecified UDP packets...

PT-2016-4945

Name of the Vulnerable Software and Affected Versions HPE IPFilter version A.11.31.18.21 on HP-UX Description The issue allows remote attackers to cause a denial of service via unspecified UDP packets when a certain keep-state configuration is enabled. Recommendations For HPE IPFilter version...

HP-UX PHNE_44295 : s700_800 11.31 s700_800 cumulative PPP patch

s700800 11.31 s700800 cumulative PPP patch : A potential security vulnerability has been identified with the HP-UX pppoec utility. The vulnerability could be exploited in allowing a local user to elevate their privilege. References: CVE-2015-2126 SSRT102094. %NASLMINLEVEL 70300 C Tenable Network...

HP-UX PHNE_44296 : s700_800 11.23 cumulative PPP patch

s700800 11.23 cumulative PPP patch : A potential security vulnerability has been identified with the HP-UX pppoec utility. The vulnerability could be exploited in allowing a local user to elevate their privilege. References: CVE-2015-2126 SSRT102094. %NASLMINLEVEL 70300 C Tenable Network Security...

CVE-2008-1668

ftpd.c in 1 wu-ftpd 2.4.2 and 2 ftpd in HP HP-UX B.11.11 assigns uid 0 to the FTP client in certain operating-system misconfigurations in which PAM authentication can succeed even though no passwd entry is available for a user, which allows remote attackers to gain privileges, as demonstrated by ...

HP-UX PHSS_43690 : s700_800 11.31 X/Motif Runtime Patch

s700800 11.31 X/Motif Runtime Patch : Potential security vulnerabilities has been identified with HP-UX running the X Windows Service libraries. These vulnerabilities could be exploited remotely to create a Denial of Service DoS or execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network...

HP-UX PHKL_44278 : s700_800 11.31 vm cumulative patch

s700800 11.31 vm cumulative patch : A potential security vulnerability have been identified with HP-UX programs using the execve2 system call. The vulnerability could be exploited locally to create an elevation of privilege. References: CVE-2015-2132 SSRT102037. %NASLMINLEVEL 70300 C Tenable...

HP-UX PHSS_44188 : s700_800 11.11 X/Motif Runtime Periodic Patch

s700800 11.11 X/Motif Runtime Periodic Patch : Potential security vulnerabilities has been identified with HP-UX running the X Windows Service libraries. These vulnerabilities could be exploited remotely to create a Denial of Service DoS or execute arbitrary code. %NASLMINLEVEL 70300 C Tenable...

HP-UX PHSS_44149 : s700_800 11.23 X/Motif Runtime Patch

s700800 11.23 X/Motif Runtime Patch : Potential security vulnerabilities has been identified with HP-UX running the X Windows Service libraries. These vulnerabilities could be exploited remotely to create a Denial of Service DoS or execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network...