HP-UX pfs_mountd.rpc PFS file system daemon buffer overflow

Buffer overflow on UDP datagrams parsing...

HPSBUX02205 SSRT061120 rev.1 - HP-UX Running ARPA Transport, Local Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00944467 Version: 1 HPSBUX02205 SSRT061120 rev.1 - HP-UX Running ARPA Transport, Local Denial of Service DoS NOTICE: The information in this Security Bulletin should be acted upon as soon as...

[security bulletin] HPSBUX02203 SSRT071339 rev.1 - HP-UX Running Portable File System (PFS), Remote Increase in Privilege

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00913684 Version: 1 HPSBUX02203 SSRT071339 rev.1 - HP-UX Running Portable File System PFS, Remote Increase in Privilege NOTICE: The information in this Security Bulletin should be acted upon as...

Buffer overflow

Buffer overflow in the pfsmountd.rpc RPC daemon in the Portable File System PFS in HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to execute arbitrary code by sending "a call to procedure 5, followed by a crafted payload to procedure 2."...

CVE-2007-1994

Unspecified vulnerability in the Address and Routing Parameter Area ARPA transport functionality in HP-UX B.11.00 allows local users to cause a denial of service via unknown vectors. NOTE: due to lack of vendor details, it is not clear whether this is the same as CVE-2007-0916...

CVE-2007-1993

Buffer overflow in the pfsmountd.rpc RPC daemon in the Portable File System PFS in HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to execute arbitrary code by sending "a call to procedure 5, followed by a crafted payload to procedure 2."...

Code injection

Unspecified vulnerability in the Address and Routing Parameter Area ARPA transport functionality in HP-UX B.11.00 allows local users to cause a denial of service via unknown vectors. NOTE: due to lack of vendor details, it is not clear whether this is the same as CVE-2007-0916...

CVE-2007-1994

Unspecified vulnerability in the Address and Routing Parameter Area ARPA transport functionality in HP-UX B.11.00 allows local users to cause a denial of service via unknown vectors. NOTE: due to lack of vendor details, it is not clear whether this is the same as CVE-2007-0916...

CVE-2007-1994

Concrete details found: CVE-2007-1994 concerns HP-UX B.11.00 ARPA Transport vulnerable to local Denial of Service. The affected component is HP-UX ARPA Transport (Address and Routing Parameter Area) and the vulnerability is triggered by local users, per HP patches and advisories. Remediation is a...

CVE-2007-1993

Buffer overflow in the pfsmountd.rpc RPC daemon in the Portable File System PFS in HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to execute arbitrary code by sending "a call to procedure 5, followed by a crafted payload to procedure 2."...

CVE-2007-1993

HP-UX CVE-2007-1993 affects the Portable File System (PFS) in HP-UX B.11.00/11.11/11.23 where the pfs_mountd.rpc daemon can overflow a UDP datagram parsing buffer, enabling a remote attacker to execute arbitrary code by sending a crafted payload to procedure 5 and then to procedure 2. The vulnera...

HP-UX ICMP vulnerable to DoS via ICMP Path Maximum Transmission Unit (PMTU) Discovery

Overview A vulnerability in HP-UX may allow a remote attacker to cause a denial of service by sending a specially crafted ICMP packet. Description A number of widely accepted Internet standards describe different aspects of the relationships between the Internet Control Message Protocol ICMP and...

CYBSEC Security Pre-Advisory: SAP RFC_SET_REG_SERVER_PROPERTY RFC Function Denial Of Service

The following pre-advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSEC-SecurityAdvisorySAPRFCSETREGSERVERPROPERTYRFCFunctionDenialofService.pdf CYBSEC S.A. www.cybsec.com Pre-Advisory Name: SAP RFCSETREGSERVERPROPERTY RFC Function Denial Of Service...

[security bulletin] HPSBMA02198 SSRT061177 rev.1 - HP OpenView Network Node Manager (OV NNM) Remote Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00854999 Version: 1 HPSBMA02198 SSRT061177 rev.1 - HP OpenView Network Node Manager OV NNM Remote Unauthorized Access NOTICE: The information in this Security Bulletin should be acted upon as soo...

[security bulletin] HPSBUX02195 SSRT061237 rev.1 - HP-UX Running Software Distributor (SD), Remote Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00874667 Version: 1 HPSBUX02195 SSRT061237 rev.1 - HP-UX Running Software Distributor SD, Remote Denial of Service DoS NOTICE: The information in this Security Bulletin should be acted upon as so...

iDefense Security Advisory 02.13.07: Hewlett-Packard HP-UX SLSd Arbitrary File Creation Vulnerability

Hewlett-Packard HP-UX SLSd Arbitrary File Creation Vulnerability iDefense Security Advisory 02.13.07 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 13, 2007 I. BACKGROUND Hewlett-Packard's HP-UX introduced "Single Logical Screen" SLS in 1995 to facilitate using multiple graphics devic...

HPSBUX02191 SSRT071302 rev.1 - HP-UX Running SLSd, Remote Unauthorized Arbitrary File Creation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00862809 Version: 1 HPSBUX02191 SSRT071302 rev.1 - HP-UX Running SLSd, Remote Unauthorized Arbitrary File Creation NOTICE: The information in this Security Bulletin should be acted upon as soon a...

[security bulletin] HPSBUX02192 SSRT061233 rev.1 - HP-UX Running ARPA Transport, Local Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00863839 Version: 1 HPSBUX02192 SSRT061233 rev.1 - HP-UX Running ARPA Transport, Local Denial of Service DoS NOTICE: The information in this Security Bulletin should be acted upon as soon as...

HP-UX SLSd unauthorized access

It's possible to create any file with attacker-supplied data...

Design/Logic Flaw

Unspecified vulnerability in the Address and Routing Parameter Area ARPA transport functionality in HP-UX B.11.11 and B.11.23 allows local users to cause an unspecified denial of service via unknown vectors...