CVE-2001-0772

The CVE-2001-0772 record concerns HP-UX systems with multiple CDE modules affected (HP-UX 10.10–11.11). The underlying issue is buffer overflows and related vulnerabilities in those modules, which the documents state can lead to a denial of service and may allow an attacker to gain additional pri...

CVE-2001-1124

rpcbind in HP-UX 11.00, 11.04 and 11.11 allows remote attackers to cause a denial of service core dump via a malformed RPC portmap requests, possibly related to a buffer overflow...

Hewlett-Packard HP-UX Software Distributor (SD-UX) contains vulnerability permitting privilege escalation

Overview HP9000 Series 700/800 running HP-UX releases 10.01, 10.10, 10.20 and 11.00 are affected by a buffer overflow in Hewlett-Packard's HP-UX Software Distributor SD-UX. A local user can exploit this vulnerability to gain elevated privileges. Description Several applications in SD-UX contain...

CVE-2001-0668

Buffer overflow in line printer daemon rlpdaemon in HP-UX 10.01 through 11.11 allows remote attackers to execute arbitrary commands...

CVE-2001-0488

This CVE concerns HP-UX 10.x where the pcltotiff utility has setgid permissions (sgid bin) to read fonts, allowing local users to cause denial of service. The root cause is insecure sgid settings on /opt/sharedprint/bin/pcltotiff, as described in HP advisory HPSBUX0104-149. Impact is local DoS; n...

CVE-2001-0379

Vulnerability in the newgrp program included with HP9000 servers running HP-UX 11.11 allows a local attacker to obtain higher access rights...

CVE-2001-0488

pcltotiff in HP-UX 10.x has unnecessary set group id permissions, which allows local users to cause a denial of service...

CVE-2001-0379

Technical details about CVE-2001-0379 are not publicly available in the provided documents. Monitor for updates.

CVE-2001-1136

The libsecurity library in HP-UX 11.04 VVOS allows attackers to cause a denial of service...

CVE-1999-1238

Vulnerability in CORE-DIAG fileset in HP message catalog in HP-UX 9.05 and earlier allows local users to gain privileges...

CVE-1999-1238

CVE-1999-1238 refers to a vulnerability in the CORE-DIAG fileset within the HP-UX HP message catalog, affecting HP-UX 9.05 and earlier. The issue enables local users to gain privileges due to the vulnerability in the CORE-DIAG fileset. Public details in the connected documents confirm the affecte...

CVE-1999-1408

Vulnerability in AIX 4.1.4 and HP-UX 10.01 and 9.05 allows local users to cause a denial of service crash by using a socket to connect to a port on the localhost, calling shutdown to clear the socket, then using the same socket to connect to a different port on localhost...

CVE-1999-1088

Technical details about CVE-1999-1088 are not provided in the supplied documents. The entry notes a privilege escalation via the HP-UX chsh command (9.X–10.20), but no specifics on affected builds, exploit vectors, or fixes are given here. Monitor for updates.

CVE-1999-1248

Technical details for CVE-1999-1248 are not publicly available in the provided documents. Monitor for updates.

CVE-1999-1408

CVE-1999-1408 affects AIX 4.1.4 and HP-UX 10.01 and 9.05. The vulnerability arises when a local user opens a socket to a localhost port, calls shutdown to clear the socket, and then reuses the same socket to connect to a different localhost port, which can trigger a denial of service (crash). The...

CVE-1999-1242

Vulnerability in subnetconfig in HP-UX 9.01 and 9.0 allows local users to gain privileges...

CVE-1999-1308

The CVE-1999-1308 issue affects HP-UX 10.20 where several programs do not properly handle large user IDs (UID) or group IDs (GID) above 60000, enabling local privilege escalation. Root cause: improper handling of high UID/GID values in affected programs. Impact as described: local privilege eleva...

CVE-1999-1247

Vulnerability in HP Camera component of HP DCE/9000 in HP-UX 9.x allows attackers to gain root privileges...

CVE-1999-1213

Vulnerability in telnet service in HP-UX 10.30 allows attackers to cause a denial of service...

CVE-1999-1311

Technical details (affected components, versions, exploitation, and fixes) are not publicly provided in the supplied documents. The initial description notes a local privilege bypass in HP-UX 10.20/10.10 via dtlogin/dtsession; monitor for updates.