HP-UX Security patch : PHKL_17254

The remote host is missing HP-UX Security Patch number PHKL17254 . Security Vulnerability with rpc.pcnfsd %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17399; scriptversion"1.6";...

CVE-2003-1097

Buffer overflow in rexec on HP-UX B.10.20, B.11.00, and B.11.04, when setuid root, may allow local users to gain privileges via a long -l option...

CVE-2003-1098

The Xserver for HP-UX 11.22 was not properly built, which introduced a vulnerability that allows local users to gain privileges...

CVE-2003-1099

CVE-2003-1099 affects HP-UX B.11.00, B.11.04, and B.11.11. The issue arises when the system creates temporary files in /tmp with predictable names, enabling local users to cause a denial of service and potentially execute arbitrary code via a symlink attack. The underlying cause is the use of pre...

CVE-2003-1097

CVE-2003-1097 describes a buffer overflow in rexec on HP-UX B.10.20, B.11.00, and B.11.04 when running setuid root, enabling local users to gain privileges via a long -l option. The available documents confirm the affected platform and component (rexec) and the root cause (buffer overflow under s...

CVE-2003-1098

The CVE-2003-1098 vulnerability affects the Xserver component on HP-UX 11.22 and is due to improper construction/build, enabling local users to gain privileges. Publicly provided data indicates local privilege escalation with a CVSS v2 base score of 7.2 (High) and local attack vector with low com...

CVE-2003-1099

shar on HP-UX B.11.00, B.11.04, and B.11.11 creates temporary files with predictable names in /tmp, which allows local users to cause a denial of service and possibly execute arbitrary code via a symlink attack...

CVE-2004-1764

Buffer overflow in CDE libDtSvc on HP-UX B.11.00, B.11.04, B.11.11, and B.11.22 allows local users to gain root privileges via unknown vectors...

CVE-2004-1764

HP-UX CDE library libDtSvc on HP-UX 11.00, 11.04, 11.11, and 11.22 contains a local buffer overflow that allows a local user to gain root privileges via unknown vectors. The vulnerability affects the CDE/libDtSvc component and is referenced across multiple sources (CVE-2004-1764, HP Security Bull...

CVE-2004-1713

Unknown vulnerability in HP Process Resource Manager PRM C.02.01.01 and earlier, as used by HP-UX Workload Manager WLM, allows local users to corrupt data files...

CVE-2004-1705

CVE-2004-1705 affects Citadel/UX 6.23 and earlier, where a buffer overflow in the remote USER command can be triggered by a crafted username. This vulnerability can cause a denial of service and, per Nessus/related sources, could allow arbitrary code execution on affected servers. The issue origi...

CVE-2004-1705

Buffer overflow in Citadel/UX 6.23 and earlier allows remote attackers to cause a denial of service via a long username...

CVE-2003-1087

The CVE-2003-1087 issue affects HP-UX on HP9000 Series 700/800 running B.11.00, B.11.04, B.11.11, or B.11.22, with the diagmond (and possibly other) applications vulnerable to denial of service via certain network traffic. Connected advisories reference HP patch HPSBUX00264 (rev. 5) and related H...

CVE-2003-1087

Unknown vulnerability in diagmond and possibly other applications in HP9000 Series 700/800 running HP-UX B.11.00, B.11.04, B.11.11, and B.11.22 allows remote attackers to cause a denial of service program failure via certain network traffic...

CVE-2004-1713

Technical details about CVE-2004-1713 are not provided in the connected documents; the materials only reiterate the basic description that local users could corrupt data files in HP PRM on HP-UX WLM. Monitor for updates.

CVE-2005-0547

Unknown vulnerability in ftpd on HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23 allows remote authenticated users to gain "unauthorized access to files."...

CVE-2005-0547

The CVE-2005-0547 entry describes an unknown vulnerability in HP-UX ftpd that allows a remote authenticated user to gain unauthorized access to files on HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23. Public references indicate HP-UX ftpd-related breaches were addressed by patches PHNE_309...

HP-UX ftpd FTP server multiple vulnerabilities

Buffer overflow in debug mode, unauthorized files access...

[Security Bulletin] SSRT4694 HP-UX ftpd remote unauthorized access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBUX01119 REVISION: 0 SSRT4694 rev.0 - HP-UX ftpd remote unauthorized access NOTICE: There are no restrictions for distribution of this Security Bulletin provided that it remains complete and intact. The information in this...

HP-UX FTP daemon is vulnerable to a buffer overflow

Overview The HP-UX FTP daemon ftpd contains a buffer overflow that may allow an unauthenticated, remote attacker to execute arbitrary code. Description The HP-UX FTP daemon ftpd is vulnerable to a buffer overflow when the FTP daemon is configured to log debugging information. Debug logging is...