4710 matches found
CVE-2002-0279
The kernel in HP-UX 11.11 does not properly provide arguments for setrlimit, which could allow local attackers to cause a denial of service kernel panic and possibly gain privileges...
CVE-2001-1264
HP-UX 11.04 running VirtualVault Operating System (VVOS) 4.0/4.5 contains a privilege-escalation vulnerability in the /sbin/mkacct program (mkacct) that could allow unauthorized privileged access. The issue is documented under CVE-2001-1264 and is referenced by HP Security Bulletin #0161. Remedia...
CVE-2002-0279
The kernel in HP-UX 11.11 does not properly provide arguments for setrlimit, which could allow local attackers to cause a denial of service kernel panic and possibly gain privileges...
CVE-2002-0279
CVE-2002-0279 affects HP-UX 11.11 on HP 9000 servers, where the kernel incorrectly supplies arguments to setrlimit. This could let a local attacker cause a kernel panic (DoS) and potentially gain privileges. HP’s security bulletin #0183 recommends applying patch PHKL_26233 (and reboot) for affect...
CVE-2001-1256
kmmodreg in HP-UX 11.11, 11.04 and 11.00 allows local users to create arbitrary world-writeable files via a symlink attack on the 1 /tmp/.kmmodreglock and 2 /tmp/kmpath.tmp temporary files...
CVE-2001-1256
CVE-2001-1256 concerns HP-UX 11.11, 11.04 and 11.00 where the kmmodreg program creates two temporary files in /tmp (namely /tmp/.kmmodreg_lock and /tmp/kmpath.tmp) with insecure handling. A local attacker can exploit a symlink race to overwrite arbitrary world-writeable files because the files ar...
CVE-2001-1264
Vulnerability in mkacct in HP-UX 11.04 running Virtualvault Operating System VVOS 4.0 and 4.5 allows attackers to elevate privileges...
eSecurityOnline Security Advisory 2406 - CDE dtprintinfo Help sea rch buffer overflow vulnerability
eSO Security Advisory: 2406 Discovery Date: March 31, 2000 ID: eSO:2406 Title: CDE dtprintinfo Help search buffer overflow vulnerability Impact: Local attackers can gain root level access Affected Technology: Solaris 2.4, 2.5, 2.5.1, 2.6, 7, 8 SPARC and x86 HP-UX 10.10, 10.20, 10.24, 11.00, 11.04...
HP-UX kernel specifies incorrect arguments for setrlimit()
Overview A problem exists in some versions of the HP-UX kernel allowing an intruder to cause kernel panics. Description Certain versions of HP-UX setrlimit system call contain a vulnerability that permits an intruder to cause kernel panics or compromise the system. Quoting from HP Security Bullet...
CVE-2001-1136
The libsecurity library in HP-UX 11.04 VVOS allows attackers to cause a denial of service...
CVE-2001-1136
CVE-2001-1136 affects the libsecurity library in HP-UX 11.04 (VVOS). The vulnerability is described as allowing a denial of service. The connected sources confirm the affected component (libsecurity) and the impact (denial of service) with a low overall severity (CVSS2 base score ~2.1, LOCAL acce...
CVE-2001-1181
Dynamically Loadable Kernel Module dlkm static kernel symbol table in HP-UX 11.11 is not properly configured, which allows local users to gain privileges...
CVE-2001-1124
rpcbind in HP-UX 11.00, 11.04 and 11.11 allows remote attackers to cause a denial of service core dump via a malformed RPC portmap requests, possibly related to a buffer overflow...
CVE-2001-1182
Vulnerability in login in HP-UX 11.00, 11.11, and 10.20 allows restricted shell users to bypass certain security checks and gain privileges...
CVE-2001-1198
RLPDaemon in HP-UX 10.20 and 11.0 allows local users to overwrite arbitrary files and gain privileges by specifying the target file in the -L option...
CVE-2001-1182
The CVE-2001-1182 vulnerability affects HP-UX systems (versions 11.00, 11.11, and 10.20) where login allows restricted shell users to bypass certain security checks and gain privileges. The provided documents describe the impact as privilege escalation via login restrictions but do not specify th...
CVE-2001-1181
CVE-2001-1181 concerns HP-UX 11.11 where the Dynamically Loadable Kernel Module (dlkm) static kernel symbol table is misconfigured, enabling local users to gain privileges. The NVD entry lists a base score of 7.2 (HIGH) with LOCAL access, low attack complexity, and complete impacts to confidentia...
CVE-2001-1124
CVE-2001-1124 affects HP-UXRpcbind on HP-UX 11.00, 11.04 and 11.11. The issue arises from malformed RPC portmap requests, potentially tied to a buffer overflow, and can cause a denial of service (core dump). The information in the connected OpenVAS entry points to an HP-UX update for rpcbind (HPS...
CVE-2001-1198
CVE-2001-1198 affects HP-UX 10.20 and 11.0. The vulnerability in RLPDaemon lets local users overwrite arbitrary files and gain privileges by specifying the target file in the -L option. The provided documents do not include exploit details, workaround, or confirmed patch information.