HP-UX PHCO_23900 : HP-UX running login(1), Local Increased Privilege (HPSBUX00160 SSRT071385 rev.3)

s700800 11.11 login cumulative patch : The login1 command allows restricted shell users to circumvent security checks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO23900. The text itself is copyright C...

HP-UX PHCO_24197 : HP-UX kmmodreg (1M), Local Denial of Service (DoS), Increased Privilege (HPSBUX00153 SSRT071381 rev.2)

s700800 11.04 VVOS Kernel configuration commands patch : The kmmodreg1M inappropriately handles files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO24197. The text itself is copyright C Hewlett-Packard...

HP-UX PHSS_22296 : HPSBUX0010-124 Sec. Vulnerability in VVOS NSAPI (rev.1)

s700800 11.04 VirtualVault 4.0 libproxy fix : The NSAPI plugin versions of the TGA and the Java Servlet proxy demonstrate high CPU utilization under certain conditions. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP...

HP-UX Security patch : PHSS_29201

The remote host is missing HP-UX Security Patch number PHSS29201 . SSRT2373 SSRT2374 SSRT3484 SSRT2405 SSRT2415 rev.2 CDE %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16702;...

HP-UX PHSS_27668 : HP-UX Running Apache, Remote Denial of Service (DoS) or Elevation Privilege, or Execution of Arbitrary Code (HPSBUX00197 SSRT2332 rev.11)

s700800 11.X OV SIP3.0 SIP3.0: web server update : A potential remotely exploitable vulnerability in handling of large data chunks in Apache-based web servers. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch...

HP-UX PHNE_27442 : HP-UX running xntpd, Remote Denial of Service (DoS) (HPSBUX00232 SSRT2370 rev.2)

s700800 11.04 VVOS NTP timeservices upgrade + utilities : xntpd software may HANG or exhibit extremely poor performance. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHNE27442. The text itself is copyright C...

HP-UX Security patch : PHKL_27833

The remote host is missing HP-UX Security Patch number PHKL27833 . SSRT2358 Security Vulnerability in JFS 3.1 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17052;...

HP-UX PHSS_25454 : HPSBUX0110-171 Sec. Vulnerability in IA HP-UX 11.20 only (rev.1)

s700800 11.20 linker cumulative patch : Security restrictions are not consistently enforced when starting applications under HP-UX 11.20. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS25454. The text itse...

CVE-2004-1486

CVE-2004-1486 affects HP-UX Serviceguard (A.11.x series) and Cluster Object Manager (A.01.x/B.01.x through B.03.00.01) with remote privilege escalation possible. Connected Nessus plugins enumerate multiple HP patches (PHSS_31065/PHSS_31066/PHSS_31067/PHSS_31069/PHSS_31070/PHSS_31072/PHSS_31073, e...

CVE-2005-0364

Unknown vulnerability in BIND 9.2.0 in HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to cause a denial of service...

CVE-2005-0364

Unknown vulnerability in BIND 9.2.0 in HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to cause a denial of service...

CVE-2005-0364

CVE-2005-0364 pertains to an unknown vulnerability in HP-UX BIND 9.2.0 running on HP-UX releases B.11.00, B.11.11, and B.11.23 that could be exploited remotely to cause a denial of service. The connected documents indicate this is addressed by the HP-UX update HPSBUX01117 (SSRT4861 rev.2) for BIN...

CVE-2005-0364

Unknown vulnerability in BIND 9.2.0 in HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to cause a denial of service...

CVE-2004-0965

stmkfont in HP-UX B.11.00 through B.11.23 relies on the user-specified PATH when executing certain commands, which allows local users to execute arbitrary code by modifying the PATH environment variable to point to malicious programs...

CVE-2005-0224

Unknown vulnerability in HP-UX B.11.04 running Virtualvault 4.5 through 4.7, when running the TGA daemon, allows remote attackers to cause a denial of service via certain network traffic...

CVE-2005-0224

CVE-2005-0224 concerns HP-UX B.11.04 with Virtualvault 4.5–4.7 when the TGA daemon runs. The vulnerability is described as unknown in the initial records, leading to a remote denial of service via certain network traffic. The public sources do not provide concrete exploit details, affected produc...

[ Security Bulletin] SSRT5900 rev.0 HP-UX TGA daemon remote Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBUX01111 REVISION: 0 SSRT5900 rev.0 HP-UX TGA daemon remote Denial of Service DoS NOTICE: There are no restrictions for distribution of this Security Bulletin provided that it remains complete and intact. The information in thi...

[SA14082] HP VirtualVault TGA Daemon Unspecified Denial of Service

TITLE: HP VirtualVault TGA Daemon Unspecified Denial of Service SECUNIA ADVISORY ID: SA14082 VERIFY ADVISORY: http://secunia.com/advisories/14082/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: HP VirtualVault 4.x http://secunia.com/product/674/ DESCRIPTION: A vulnerabilit...

CVE-2005-0224

Unknown vulnerability in HP-UX B.11.04 running Virtualvault 4.5 through 4.7, when running the TGA daemon, allows remote attackers to cause a denial of service via certain network traffic...

Citadel/UX select() Bitmap Array Index Remote Oerflow

The remote host is running Citadel/UX, a messaging server for Unix. The remote version of this software is vulnerable to a buffer overflow when performing a select system call while providing very high file descriptors. A remote attacker may exploit this flaw to modify at least one byte in memory...