4712 matches found
[security bulletin] HPSBUX02285 SSRT071484 rev.1 - HP-UX Running Aries PA Emulator, Local Unauthorized Access
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01241483 Version: 1 HPSBUX02285 SSRT071484 rev.1 - HP-UX Running Aries PA Emulator, Local Unauthorized Access NOTICE: The information in this Security Bulletin should be acted upon as soon as...
HP-UX Aries PA-RISC Emulator本地未授权访问漏洞
HP-UX是一款商业性质的操作系统。 HP-UX Aries PA-RISC Emulator存在未明安全问题，本地攻击者可以利用漏洞获得未授权访问。 目前没有详细漏洞细节提供 HP HP-UX B.11.31 HP HP-UX B.11.23 HP Aries PA-RISC Emulator 11.31 HP Aries PA-RISC Emulator 11.23 补丁下载： HP HP-UX B.11.31 HP PHSS36311 IA-64 platform http://itrc.hp.com HP HP-UX B.11.23 HP PHSS35528 IA-64...
Integer overflow
Integer overflow in McAfee E-Business Server before 8.5.3 for Solaris, and before 8.1.2 for Linux, HP-UX, and AIX, allows remote attackers to execute arbitrary code via a large length value in an authentication packet, which results in a heap-based buffer overflow...
CVE-2002-2363
CVE-2002-2363 affects HP-UX 11.00 via the VJE.VJE-RUN component, which adds the bin directory to /etc/PATH, enabling local users to gain privileges. The vulnerability is rooted in PATH modification by VJE.VJE-RUN, with the described impact including potential privilege elevation. Exploitation det...
CVE-2002-2363
VJE.VJE-RUN in HP-UX 11.00 adds bin to /etc/PATH, which could allow local users to gain privileges...
HPSBMA02279 SSRT071298 rev.1 - HP OpenView Configuration Management (CM) Infrastructure (Radia) and Client Configuration Manager (CCM) Running httpd.tkd, Remote Unauthorized Access to Data
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01205079 Version: 1 HPSBMA02279 SSRT071298 rev.1 - HP OpenView Configuration Management CM Infrastructure Radia and Client Configuration Manager CCM Running httpd.tkd,...
CVE-2003-1461
Buffer overflow in rwrite for HP-UX 11.0 could allow local users to execute arbitrary code via a long argument. NOTE: the vendor was unable to reproduce the problem on a system that had been patched for an lp vulnerability CVE-2002-1473...
CVE-2003-1461
Summary: CVE-2003-1461 is a HP-UX LPD-related issue. The connected documents describe a vulnerability in the HP-UX LPD service that permits remote command execution with root privileges, exploitable when the target can resolve the attacker's address. The vulnerability is associated with the LPD s...
CVE-2003-1375
Buffer overflow in wall for HP-UX 10.20 through 11.11 may allow local users to execute arbitrary code by calling wall with a large file as an argument...
CVE-2003-1374
Technical details about CVE-2003-1374 are not provided in the connected documents. The sources mainly restate the buffer overflow description without specifics on affected versions, root cause, or fixes. Monitor for updates.
CVE-2003-1374
Buffer overflow in disable of HP-UX 11.0 may allow local users to execute arbitrary code via a long argument to the 1 -r or 2-c options...
CVE-2003-1375
The CVE-2003-1375 entry describes a buffer overflow in the HP-UX wall utility for HP-UX 10.20–11.11, potentially allowing a local attacker to execute arbitrary code by passing a large file as an argument. Affected component: wall on HP-UX; root cause is a buffer overflow when handling a large arg...
HP-UX OpenSSL未明本地拒绝服务漏洞
HP HP-UX是一款商业性质的操作系统。 HP-UX包含的OpenSSL实现存在未明问题，本地攻击者可以利用漏洞对应用服务进行拒绝服务攻击。 目前没有详细漏洞细节提供。 HP HP-UX 11.23 HP HP-UX 11.11 HP HP-UX 11.31 可参考如下安全公告获得补丁信息： http://www.securityfocus.com/archive/1/482369...
CVE-2002-2270
Unspecified vulnerability in the ied command in HP-UX 10.10, 10.20, and 11.0 allows local users to view "normally invisible data" via unknown attack vectors...
CVE-2002-2270
The CVE-2002-2270 entry concerns HP-UX (versions 10.10, 10.20, 11.0) with an unspecified vulnerability in the built‑in ied command that allows local users to view normally invisible data via unknown attack vectors. The affected component is the ied command on those HP-UX releases; the underlying ...
CVE-2002-2263
CVE-2002-2263 concerns the HP-UX Visualize Conference B.11.00.11 installer on HP-UX 11.00/11.11, which creates /etc/dt and its subdirectories with insecure permissions. This permits local users to read or write arbitrary files due to improper permission handling during installation. The provided ...
CVE-2002-2262
CVE-2002-2262 describes an unspecified vulnerability in xntpd for HP-UX 10.20–11.11 that can be exploited remotely to cause a denial of service (hang) via unknown attack vectors. The NVD CVSS metrics indicate a network-exposed issue with low attack complexity and no authentication, yielding a Ava...
CVE-2002-2262
Unspecified vulnerability in xntpd of HP-UX 10.20 through 11.11 allows remote attackers to cause a denial of service hang via unknown attack vectors...
CVE-2002-2263
The installation program for HP-UX Visualize Conference B.11.00.11 running on HP-UX 11.00 and 11.11 installs /etc/dt and its subdirecties with insecure permissions, which allows local users to read or write arbitrary files...
