CVE-1999-1249

CVE-1999-1249 affects HP-UX 10.20 movemail. The issue is insecure permissions in the movemail component, which can be exploited by local users to gain privileges. Mitigation is to adjust/correct the movemail permissions to prevent unauthorized privilege escalation.

CVE-1999-1145

Vulnerability in Glance programs in GlancePlus for HP-UX 10.20 and earlier allows local users to access arbitrary files and gain privileges...

CVE-2000-0699

Format string vulnerability in ftpd in HP-UX 10.20 allows remote attackers to cause a denial of service or execute arbitrary commands via format strings in the PASS command...

CVE-1999-1144

The CVE-1999-1144 entry affects HP-UX MPower on HP-UX 10.x, where certain MPower files are installed with insecure permissions, enabling local privilege escalation due to insufficient access controls. Root cause: insecure file permissions. Connected PT-1997-1195 notes the remediation to update/se...

CVE-1999-1160

Technical details about CVE-1999-1160 are not publicly available in the provided documents. Monitor for updates.

CVE-1999-1146

CVE-1999-1146 : Vulnerability in the Glance and gpm programs of GlancePlus on HP-UX 9.x and earlier allows local users to access arbitrary files and gain privileges. The description does not specify affected versions beyond the HP-UX 9.x and earlier, nor provide explicit remediation steps. No exp...

CVE-1999-1136

Vulnerability in Predictive on HP-UX 11.0 and earlier, and MPE/iX 5.5 and earlier, allows attackers to compromise data transfer for Predictive messages using e-mail or modem between customer and Response Center Predictive systems...

CVE-1999-1145

CVE-1999-1145 concerns the Glance programs in GlancePlus for HP-UX 10.20 and earlier. The vulnerability allows local users to access arbitrary files and gain privileges. The affected component is GlancePlus on HP-UX, with the root cause described as a local access flaw that enables privilege esca...

CVE-1999-1139

CVE-1999-1139 describes a local privilege escalation in HP-UX 11.0 and earlier via a symlink attack on IOERROR.mytty, allowing local users to overwrite arbitrary files and gain root privileges. Affected component is HP-UX system tooling related to Character-Terminal User Environment (CUE). The co...

CVE-1999-1102

The CVE-1999-1102 entry concerns lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1 and other BSD-based systems. The vulnerability arises from a symlink-related attack in lpr that enables local users to create or overwrite arbitrary files after the program is invoked 1000 times. Root cause is a symlink hand...

CVE-2001-0668

CVE-2001-0668 describes a remote buffer overflow in HP-UX's line printer daemon (rlpdaemon) affecting HP-UX releases 10.01 through 11.11. The vulnerability allows remote attackers to execute arbitrary commands with superuser privileges by sending crafted print requests. This issue is documented a...

CVE-2001-0668

Buffer overflow in line printer daemon rlpdaemon in HP-UX 10.01 through 11.11 allows remote attackers to execute arbitrary commands...

CVE-1999-1139

Character-Terminal User Environment CUE in HP-UX 11.0 and earlier allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the IOERROR.mytty file...

CVE-1999-1249

movemail in HP-UX 10.20 has insecure permissions, which allows local users to gain privileges...

CVE-1999-1161

Vulnerability in ppl in HP-UX 10.x and earlier allows local users to gain root privileges by forcing ppl to core dump...

CVE-1999-1205

nettune in HP-UX 10.01 and 10.00 is installed setuid root, which allows local users to cause a denial of service by modifying critical networking configuration information...

CVE-1999-1205

CVE-1999-1205 affects nettune on HP-UX 10.01 and 10.00 where nettune is installed with setuid root, enabling a local attacker to modify critical networking configuration and cause a denial of service. The underlying cause is the risky setuid configuration of nettune, leading to elevated privilege...

CVE-1999-1160

Vulnerability in ftpd/kftpd in HP-UX 10.x and 9.x allows local and possibly remote users to gain root privileges...

CVE-1999-1136

CVE-1999-1136 affects Predictive on HP-UX (11.0 and earlier) and MPE/iX (5.5 and earlier). The underlying issue is in the traffic used for Predictive messages (via e-mail or modem) between customer machines and Response Center Predictive systems, which can allow an attacker to compromise data tra...

CVE-1999-1161

CVE-1999-1161 describes a local privilege-escalation vulnerability in HP-UX 10.x and earlier where forcing the ppl process to core-dump allows a local user to gain root privileges. Affected software: HP-UX kernel/userland component handling ppl (HP-UX 10.x and earlier). Root cause: improper handl...