4710 matches found
HP-UX 11 RWrite - Buffer Overflow
source: https://www.securityfocus.com/bid/7489/info HP-UX rwrite utility has been reported prone to a buffer overflow vulnerability. Although unconfirmed code execution with elevated privileges may be possible. The condition presents itself when excessive data is supplied as part of an argument...
HP-UX 10.x11.x - RExec Remote Username Flag Local Buffer Overrun
HP-UX 10.x11.x - RExec Remote Username Flag Local Buffer Overrun source: https://www.securityfocus.com/bid/7459/info It has been reported that a problem in the rexec program included with some versions of HP-UX may be vulnerable to a boundary condition error. It may be possible for a local user t...
HP-UX 10.x/11.x - RExec Remote 'Username' Flag Local Buffer Overrun
source: https://www.securityfocus.com/bid/7459/info It has been reported that a problem in the rexec program included with some versions of HP-UX may be vulnerable to a boundary condition error. It may be possible for a local user to exploit this vulnerability to gain elevated privileges on the...
CVE-2002-1473
Multiple buffer overflows in lp subsystem for HP-UX 10.20 through 11.11 11i allow local users to cause a denial of service and possibly execute arbitrary code...
CVE-2002-1439
Unknown vulnerability related to stack corruption in the TGA daemon for HP-UX 11.04 VVOS Virtualvault 4.0, 4.5, and 4.6 may allow attackers to obtain access to system files...
CVE-2002-1409
ptrace on HP-UX 11.00 through 11.11 allows local users to cause a denial of service data page fault panic via "an incorrect reference to thread register state."...
CVE-2002-1406
Unknown vulnerability in passwd for VVOS HP-UX 11.04, with unknown impact, related to "Unexpected behavior."...
CVE-2001-0978
login in HP-UX 10.26 does not record failed login attempts in /var/adm/btmp, which could allow attackers to conduct brute force password guessing attacks without being detected or observed using the lastb program...
CVE-2001-0978
CVE-2001-0978 affects HP-UX 10.26 where failed login attempts are not recorded in /var/adm/btmp, enabling brute‑force password guessing without detection via lastb. Severity in NVD shows High (CVSSv2 base 7.5, network access, no authentication). The entry notes the absence of observation of faile...
HP-UX 10/11 - NLSPATH Environment Variable Format String (2)
// source: https://www.securityfocus.com/bid/8985/info HP-UX allows the NLSPATH to be set for setuid root programs, which use catopen3C and may be executed by other local users. This could result in privilege escalation as an attacker could specify an arbitrary path for a message catalogue, which...
HP-UX 1011 - NLSPATH Environment Variable Format String (1)
HP-UX 1011 - NLSPATH Environment Variable Format String 1 // source: https://www.securityfocus.com/bid/8985/info HP-UX allows the NLSPATH to be set for setuid root programs, which use catopen3C and may be executed by other local users. This could result in privilege escalation as an attacker coul...
HP-UX 1011 - NLSPATH Environment Variable Format String (2)
HP-UX 1011 - NLSPATH Environment Variable Format String 2 // source: https://www.securityfocus.com/bid/8985/info HP-UX allows the NLSPATH to be set for setuid root programs, which use catopen3C and may be executed by other local users. This could result in privilege escalation as an attacker coul...
HP-UX 10/11 - NLSPATH Environment Variable Format String (1)
// source: https://www.securityfocus.com/bid/8985/info HP-UX allows the NLSPATH to be set for setuid root programs, which use catopen3C and may be executed by other local users. This could result in privilege escalation as an attacker could specify an arbitrary path for a message catalogue, which...
Sendmail Address Prescan Memory Corruption Vulnerability
Description A vulnerability in Sendmail may be exploited remotely to execute arbitrary code. The flaw is present in the 'prescan' procedure, which is used for processing email addresses in SMTP headers. This condition has been confirmed to be exploitable by remote attackers to execute instruction...
CVE-2002-1409
ptrace on HP-UX 11.00 through 11.11 allows local users to cause a denial of service data page fault panic via "an incorrect reference to thread register state."...
CVE-2002-1406
Technical details about CVE-2002-1406 are not publicly provided in the supplied documents. No concrete affected product/version, root cause, or remediation is described here. Monitor updates from the CVE entries and connected sources for new information.
CVE-2002-1473
Multiple buffer overflows in lp subsystem for HP-UX 10.20 through 11.11 11i allow local users to cause a denial of service and possibly execute arbitrary code...
CVE-2002-1409
CVE-2002-1409 affects HP-UX 11.00 through 11.11, where ptrace handling allows a local user to trigger a denial-of-service (data page fault panic) via an incorrect reference to thread register state. The available documents confirm the affected platform and the root cause (ptrace thread-state refe...