4709 matches found
CVE-2001-0979
Buffer overflow in swverify in HP-UX 11.0, and possibly other programs, allows local users to gain privileges via a long command line argument...
CVE-2001-0976
HP Process Resource Manager (PRM) C.01.08.2 and earlier, used by HP-UX Workload Manager (WLM), is vulnerable to local privilege escalation via manipulated libraries or environment variables. Root privileges can be gained by a local user due to the underlying insecure handling of library paths and...
CVE-2001-0979
CVE-2001-0979 describes a buffer overflow in HP-UX SD-UX component SWVERIFY on HP-UX 11.00 (and likely other HP-UX releases) that enables a local user to gain elevated privileges via a long command line argument. The vulnerability is associated with a local-authenticated attack vector and complet...
CVE-2003-0061
Buffer overflow in passwd for HP UX B.10.20 allows local users to execute arbitrary commands with root privileges via a long LANG environment variable...
CVE-2001-1509
geteuid in Itanium Architecture IA running on HP-UX 11.20 does not properly identify a user's effective user id, which could allow local users to gain privileges...
HP-UX setuid rlpdaemon induced to make illicit file writes
This may have gone AWOL before. If there was a reason for the moderator dropping it I'd be interested to know. G.B. THE PROBLEM /usr/sbin/rlpdaemon in HP-UX is setuid root. Switches include "-l" to enable logging and "-L /some/thing" to select a logfile other than the default. When run by a...
CVE-2001-1198
RLPDaemon in HP-UX 10.20 and 11.0 allows local users to overwrite arbitrary files and gain privileges by specifying the target file in the -L option...
Problem with HP r-cmnds
Overview A problem existed with HP versions of the r-commands remshd, rexecd, rlogin, rlogind, remsh, rcp, rexec, rdist in use circa December, 1998. Description See HEWLETT-PACKARD COMPANY SECURITY BULLETIN: 00090, registration required 07 December 1998 for a description of the problem. No other...
CVE-2001-0817
Vulnerability in HP-UX line printer daemon rlpdaemon in HP-UX 10.01 through 11.11 allows remote attackers to modify arbitrary files and gain root privileges via a certain print request...
CVE-2001-0809
Vulnerability in CIFS/9000 Server SAMBA A.01.06 and earlier in HP-UX 11.0 and 11.11, when configured as a print server, allows local users to overwrite arbitrary files by modifying certain resources...
NMRC Advisory - Multiple Valicert Problems
Information Anarchy 2K01 Nomad Mobile Research Centre A D V I S O R Y www.nmrc.org Cyberiad [email protected] Phuzzy L0gic [email protected] 04Dec2001 Platforms : Windows NT 4.0 with SP6a : Windows 2000 Server : Solaris 2.6-2.8 : AIX 4.3.3 : HP-UX 11.0 Application : ValiCert Enterprise VA v3.3 - 4.2....
CVE-2001-0817
Vulnerability in HP-UX line printer daemon rlpdaemon in HP-UX 10.01 through 11.11 allows remote attackers to modify arbitrary files and gain root privileges via a certain print request...
CVE-2001-0809
The CVE-2001-0809 issue affects HP-UX 11.0/11.11 CIFS/9000 Server (SAMBA) prior to patch A.01.06. When configured as a print server, local users can overwrite arbitrary files by modifying certain resources. The vulnerability is documented in HP patch PHNE_24164 (A.01.06) for s700/s800 11.X CIFS/9...
CVE-2001-0809
Vulnerability in CIFS/9000 Server SAMBA A.01.06 and earlier in HP-UX 11.0 and 11.11, when configured as a print server, allows local users to overwrite arbitrary files by modifying certain resources...
CVE-2001-0817
The CVE-2001-0817 issue affects HP-UX rlpdaemon (line printer daemon) across HP-UX releases 10.01 through 11.11. The vulnerability is a remote/logic flaw in rlpdaemon that allows a crafted print request to create arbitrary files or directories and gain superuser privileges. Evidence from multiple...
HP-UX Line Printer Daemon Vulnerable to Directory Traversal
Overview A remotely exploitable directory traversal vulnerability exists in the HP-UX line printer daemon. Description The line printer daemon rlpdaemon enables various clients to share printers over a network. By sending a specially crafted print request to an HP-UX host running the rlpdaemon, a...
ISS Security Advisory: Remote Logic Flaw Vulnerability in HP-UX Line Printer Daemon
Internet Security Systems Security Advisory November 20, 2001 Remote Logic Flaw Vulnerability in HP-UX Line Printer Daemon Synopsis: Internet Security Systems ISS X-Force has discovered a vulnerability in the HP-UX line printer daemon rlpdaemon. This vulnerability may allow a remote or local...
CVE-2001-0772
Buffer overflows and other vulnerabilities in multiple Common Desktop Environment CDE modules in HP-UX 10.10 through 11.11 allow attackers to cause a denial of service and possibly gain additional privileges...
HP-UX vulnerable to buffer overflow in line printer daemon (rlpdaemon) via crafted print request
Overview The line printer daemon rlpdaemon on HP-UX systems enable various clients to share printers over a network. There exists a buffer overflow vulnerability in this daemon that permits remote execution of arbitrary commands with elevated privileges. Description A buffer overflow exists in...
CVE-2001-0772
Buffer overflows and other vulnerabilities in multiple Common Desktop Environment CDE modules in HP-UX 10.10 through 11.11 allow attackers to cause a denial of service and possibly gain additional privileges...