Design/Logic Flaw

Unspecified vulnerability in NFS / ONCplus B.11.3104 and earlier on HP-UX B.11.31 allows remote attackers to cause a denial of service via unknown attack vectors...

CVE-2008-3543

HP-UX NFS/ONCplus (B.11.31, all affected components) is affected by CVE-2008-3543 with a remote DoS potential via unspecified attack vectors. The HP Security Bulletin HPSBUX02375 recommends upgrading to ONCplus_B.11.31.05 (or later) to resolve the issue, and HP-UX patch details are provided via t...

CVE-2008-3543

Unspecified vulnerability in NFS / ONCplus B.11.3104 and earlier on HP-UX B.11.31 allows remote attackers to cause a denial of service via unknown attack vectors...

HP-UX PHNE_37110 : HP-UX Running rpcbind, Remote Denial of Service (DoS) (HPSBUX02370 SSRT071459 rev.1)

s700800 11.11 ONC/NFS General Release/Performance Patch : A potential security vulnerability has been identified with HP-UX running rpcbind. The vulnerability could be remotely exploited to create a Denial of Service DoS . %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

HP-UX PHNE_36982 : HP-UX Running rpcbind, Remote Denial of Service (DoS) (HPSBUX02370 SSRT071459 rev.1)

s700800 11.23 libnsl cumulative patch : A potential security vulnerability has been identified with HP-UX running rpcbind. The vulnerability could be remotely exploited to create a Denial of Service DoS . %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks i...

IBM DB2 Universal Database Server 8.2 Fixpak 17之前存在多个漏洞

BUGTRAQ ID: 31058 CNCAN ID：CNCAN-2008091101 IBM DB2是一款大型的商业关系数据库系统， IBM DB2 Universal Database Server 8.2 Fixpak 17之前版本存在多个漏洞，攻击者可以利用漏洞进行如下攻击： -相关CONNECT / ATTACH处理存在远程拒绝服务攻击。 -DB2FMP过程存在未明安全问题。 -DB2JDS存在远程拒绝服务攻击。 -在Windows平台下以系统特权执行DB2FMP过程。 攻击者可以利用这些漏洞进行拒绝服务攻击，也可能造成其他未明攻击行为。 IBM DB2 Universal...

HP OpenView Network Node Manager拒绝服务漏洞

BUGTRAQ ID: 30984 CVE ID：CVE-2008-3536 CVE-2008-3537 CNCVE ID：CNCVE-20083536 CNCVE-20083537 HP OpenView Network Node Manager是一款HP公司开发和维护的网络管理系统软件，具有强大的网络节点管理功能。 HP OpenView Network Node Manager存在多个拒绝服务问题，远程攻击者可以利用漏洞使应用程序崩溃。 目前没有详细漏洞细节提供。 HP OpenView Network Node Manager 7.53 HP OpenView Network...

HPSBUX02354 SSRT080113 rev.1 - HP-UX Running Netscape / Red Hat Directory Server, Remote Cross Site Scripting (XSS) or Remote Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01532861 Version: 1 HPSBUX02354 SSRT080113 rev.1 - HP-UX Running Netscape / Red Hat Directory Server, Remote Cross Site Scripting XSS or Remote Denial of Service DoS NOTICE: The information in th...

[security bulletin] HPSBMA02362 SSRT080044, SSRT080045 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01537275 Version: 1 HPSBMA02362 SSRT080044, SSRT080045 rev.1 - HP OpenView Network Node Manager OV NNM, Remote Denial of Service DoS NOTICE: The information in this Security Bulletin should be...

HP System Management Homepage (SMH) 'message.php'跨站脚本漏洞

BUGTRAQ ID:30846 CNCAN ID：CNCAN-2008082702 HP System Management Homepage是一款HP公司发布的系统管理主页。 HP System Management Homepage不正确处理用于显示通用错误消息的输入参数，远程攻击者可以利用漏洞进行跨站脚本攻击，可获得敏感信息。 漏洞影响"message.php"脚本，此页面使用JavaScript属性"location.search"用于建立错误消息，如URL中提供的错误ID不匹配任何合法的代码，通用错误会报告"An unknown error %INVALIDCODE%...

HP-UX PHNE_38458 : HP-UX Running ftpd, Remote Privileged Access (HPSBUX02356 SSRT080051 rev.1)

s700800 11.11 ftpd1M and ftp1 patch : A potential security vulnerability has been identified with HP-UX running ftpd. The vulnerability could be exploited to allow remote privileged access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin...

[security bulletin] HPSBUX02356 SSRT080051 rev.1 - HP-UX Running ftpd, Remote Privileged Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01525562 Version: 1 HPSBUX02356 SSRT080051 rev.1 - HP-UX Running ftpd, Remote Privileged Access NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. Release...

HP-UX ftpd PAM Authentication Configuration Weakness Authentication Bypass

According to its banner, the version of the HP-UX FTP server running on the remote host is at a patch level before PHNE38458. Such versions reportedly contain a vulnerability that in certain account configurations could be exploited by an anonymous remote attacker to gain privileged access. Note...

HP-UX unauthorized access with ftp server

No description provided...

HP-UX ftpd Remote Privileged Access Authentication Bypass

Binary data 4624.prm...

HP-UX 'ftpd'未明远程特权提升漏洞

BUGTRAQ ID: 30666 CVE ID：CVE-2008-1668 CNCVE ID：CNCVE-20081668 HP-UX是一款商业性质的操作系统。 HP-UX包含的'ftpd'存在未明特权提升问题，远程攻击者可以利用漏洞获得高权限获得对系统的控制。 目前没有详细漏洞细节提供。 HP-UX B.11.11 可联系供应商获得补丁信息： http://www.hp.com/products1/unix/operating/...

Information disclosure

ftpd.c in 1 wu-ftpd 2.4.2 and 2 ftpd in HP HP-UX B.11.11 assigns uid 0 to the FTP client in certain operating-system misconfigurations in which PAM authentication can succeed even though no passwd entry is available for a user, which allows remote attackers to gain privileges, as demonstrated by ...

CVE-2008-1668

CVE-2008-1668 affects HP-UX ftpd (HP-UX B.11.11) and wu-ftpd-based ftpd included with HP-UX. The issue arises when PAM authentication can succeed even if getpwnam returns NULL, allowing remote attackers to gain privileges by logging in as an LDAP user under certain misconfigurations of nsswitch.c...

CVE-2008-1668

ftpd.c in 1 wu-ftpd 2.4.2 and 2 ftpd in HP HP-UX B.11.11 assigns uid 0 to the FTP client in certain operating-system misconfigurations in which PAM authentication can succeed even though no passwd entry is available for a user, which allows remote attackers to gain privileges, as demonstrated by ...

HP-UX PHCO_38273 : HP-UX Using libc, Remote Denial of Service (DoS) (HPSBUX02355 SSRT080023 rev.2)

s700800 11.23 libc cumulative patch : A potential security vulnerability has been identified in HP-UX using libc. This vulnerability could be exploited remotely to create a Denial of Service DoS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this...