CVE-2000-0730

CVE-2000-0730 describes a vulnerability in the HP-UX 11.0 Affected software: HP-UX operating system (HP-UX 11.0) and its newgrp command. Issue: Local privilege escalation. The root cause is not detailed in the provided documents. Impact: Local users may gain privileges. Exploitation: Not provided...

CVE-2000-0515

The CVE-2000-0515 issue affects HP-UX 11.0 where the snmpd.conf configuration file of the SNMP daemon (snmpd) is world-writable. This allows local users to modify SNMP configuration or gain privileges due to the insecure permissions on the config file (world-writable). The provided description do...

CVE-2000-0730

Vulnerability in newgrp command in HP-UX 11.0 allows local users to gain privileges...

CVE-2000-0755

Vulnerability in the newgrp command in HP-UX 11.00 allows local users to gain privileges...

CVE-2000-0801

Buffer overflow in bdf program in HP-UX 11.00 may allow local users to gain root privileges via a long -t option...

CVE-2000-0755

Vulnerability CVE-2000-0755 affects HP-UX 11.00 in the newgrp command, enabling local privilege escalation. The connected records confirm the affected product (HP-UX 11.00) and the vulnerable component (newgrp), with the impact described as local privilege gain. The exact root cause, exploitation...

CVE-2000-0801

CVE-2000-0801 describes a buffer overflow in HP-UX 11.00’s bdf program that can be triggered by a long -t option, allowing local users to gain root privileges . The root cause is an overflow in the bdf implementation. The affected software is HP-UX 11.00 and the bdf utility; no remediation versio...

[HackersLab bugpaper] HP-UX net.init rc script

============================================================================ ==== Hackerslab bugpaper HP-UX net.init rc script ============================================================================ ==== Testing : HP-UX 11.00 default HP-UX cleantmps rc script is disable. cat /etc/rc.config.d...

Дырка в HP-UX net.init

Инициализирующий скрипт некорректно работает с временными файлами, в результате любой файл можно испортить с помощью символьных линков...

HP-UX 11.0 - net.init RC Script

HP-UX 11.0 - net.init RC Script source: https://www.securityfocus.com/bid/1602/info A vulnerability exists in HP-UX, from Hewlett Packard, under certain configurations. Version 11.0 is confirmed to have this problem; other versions may also be susceptible. If the CLEARTMP option in /etc/rc.config...

HP-UX 11.0 - net.init RC Script

source: https://www.securityfocus.com/bid/1602/info A vulnerability exists in HP-UX, from Hewlett Packard, under certain configurations. Version 11.0 is confirmed to have this problem; other versions may also be susceptible. If the CLEARTMP option in /etc/rc.config.d is set to 1, meaning enabled,...

Переполнения буфера в HP-UX

Переполнения буфера в суидных утилитах df root, exrecover root, uusub uucp...

HP-UX FTP Daemon PASS Command Remote Format String

The remote ftp server does not sanitize properly the argument of the PASS command it receives for anonymous accesses. It may be possible for a remote attacker to gain shell access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Дырка в HP-UX FTPd

Переполнение буфера в результате ошибки форматной строки команда PASS...

[ Hackerslab bug_paper ] HP-UX bdf -t option buffer overflow vul.

================================================================================ Hackerslab bugpaper HP-UX bdf -t option buffer overflow vul ================================================================================ File : /usr/bin/bdf SYSTEM : HP-UX 11.00 Tested by HP-UX B.11.00 INFO : bdf...

Переполнение буфера в bdf из HP-UX

Классическое переполнение буфера при исопльзовании ключа -t...

CVE-2000-0251

HP-UX 11.04 VirtualVault VVOS sends data to unprivileged processes via an interface that has multiple aliased IP addresses...

CVE-2000-0251

HP-UX 11.04 VirtualVault (VVOS) is affected by CVE-2000-0251. The issue involves VVOS sending data to unprivileged processes via an interface that has multiple aliased IP addresses. This exposes sensitive data to unprivileged processes, with the documented impact indicating partial integrity comp...

CVE-2000-0414

Vulnerability in shutdown command for HP-UX 11.X and 10.X allows allows local users to gain privileges via malformed input variables...

CVE-2000-0414

The CVE-2000-0414 entry describes a local privilege escalation in HP-UX 11.X/10.X caused by a flaw in the shutdown command’s handling of input variables. A local attacker could exploit malformed input to gain elevated privileges. The available sources confirm the affected component (shutdown comm...