Hewlett-Packard MPE/iX NM Debug does not always handle breakpoints correctly

Overview There is a problem in the NM Debug facility of MPE/iX that allows users to gain unauthorized privileges. Description The problem affects HP3000 systems running MPE/iX versions 5.5 through 6.5. HP has published a security bulletin describing the solution to this vulnerability...

CVE-2001-0267

CVE-2001-0267 concerns a vulnerability in HP MPE/iX’s NM Debug facility. The HP NM Debug mechanism fails to handle breakpoints correctly on MPE/iX versions 5.5 through 6.5, allowing local users to gain unauthorized privileges (potentially root). CERT notes the issue enables local privilege escala...

CVE-2001-0278

Vulnerability in linkeditor in HP MPE/iX 6.5 and earlier allows local users to gain privileges...

CVE-2001-0267

NM debug in HP MPE/iX 6.5 and earlier does not properly handle breakpoints, which allows local users to gain privileges...

CVE-2001-0278

The CVE concerns HP MPE/iX linkeditor vulnerability on HP3000 systems (MPE/iX 5.5–6.5). Local users may gain system manager/root privileges due to the linkeditor component. HP published security bulletin HPSBMP0102-009; remediation is to apply the patches described in the bulletin. Some sources n...

CVE-2001-0267

NM debug in HP MPE/iX 6.5 and earlier does not properly handle breakpoints, which allows local users to gain privileges...

CVE-2001-0278

Vulnerability in linkeditor in HP MPE/iX 6.5 and earlier allows local users to gain privileges...

Hewlett-Packard MPE/ix contains vulnerabitily via architected interface facility

Overview A vulnerability in certain Hewlett-Packard systems allows users to gain unauthorized access to user accounts and databases using the architected interface facility. Description HP3000 systems running MPE/iX release 5.5 and newer contain a vulnerability in the architected interface facili...

CVE-1999-0447

Technical details are not publicly available in the provided connected documents. Monitor for updates.

CVE-1999-0447

Local users can gain privileges using the debug utility in the MPE/iX operating system...

hp-ux.mpei-x.txt

Date: Tue, 13 Apr 1999 04:37:00 -0700 PDT Subject: Security Bulletins Digest From: [email protected] HP Electronic Support Center To: [email protected] Reply-To: [email protected] Errors-To:...

CVE-1999-0447

Local users can gain privileges using the debug utility in the MPE/iX operating system...

CVE-1999-1136

Vulnerability in Predictive on HP-UX 11.0 and earlier, and MPE/iX 5.5 and earlier, allows attackers to compromise data transfer for Predictive messages using e-mail or modem between customer and Response Center Predictive systems...

PT-1998-1152 · Hewlett Packard · Predictive

Name of the Vulnerable Software and Affected Versions: Predictive versions prior to 11.0 on HP-UX Predictive versions prior to 5.5 on MPE/iX Description: The issue allows attackers to compromise data transfer for Predictive messages, which are sent between the customer and Response Center...