4704 matches found
HP-UX 10.2011.0 - man tmp Symlink
HP-UX 10.2011.0 - man tmp Symlink source: https://www.securityfocus.com/bid/1302/info The programmers of the 'man' command on various HPUX releases have made several fatal mistakes that allow an attacker to trivially set a trap that could result in any arbitrary file being overwritten on the syst...
Переполнение буфера в shutdown из HP-UX
No description provided...
CVE-2000-0414
Vulnerability in shutdown command for HP-UX 11.X and 10.X allows allows local users to gain privileges via malformed input variables...
CVE-2000-0095
The PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU generates large amounts of traffic in response to small packets, allowing remote attackers to cause the system to be used as a packet amplifier...
CVE-2000-0159
CVE-2000-0159 affects HP Ignite-UX. The issue: when imaging a trusted system, Ignite-UX does not save /etc/passwd, which can leave the password field blank and enable privilege escalation. The description and connected documents confirm the vulnerable component and the underlying behavior, but do...
CVE-2000-0095
CVE-2000-0095 concerns the PMTU discovery procedure in HP-UX 10.30 and 11.00, which, according to the documentation, generates large amounts of traffic in response to small packets. This behavior can be leveraged by a remote attacker to use the affected system as a packet amplifier. The connected...
CVE-2000-0159
HP Ignite-UX does not save /etc/passwd when it creates an image of a trusted system, which can set the password field to a blank and allow an attacker to gain privileges...
Local root compromise in GNQS 3.50.6 and 3.50.7
A large security hole was uncovered last month in Generic-NQS ver. 3.50.6 and 3.50.7. This hole leads to immediate local root compromise. All users of those versions are requested to upgrade to ver. 3.50.8 or later ASAP. The updated package can be downloaded from...
CVE-2000-0251
HP-UX 11.04 VirtualVault VVOS sends data to unprivileged processes via an interface that has multiple aliased IP addresses...
Data General DG/UX 5.4 - inetd Service Exhaustion Denial of Service
source: https://www.securityfocus.com/bid/1071/info A Denial of service DoS attack is possible with the default version of inetd distributed with Data General's DG/UX operating system. By performing a scan utilizing nmap's OS detection option -O, the inetd daemon is put in a state where it will n...
CVE-2000-0159
HP Ignite-UX does not save /etc/passwd when it creates an image of a trusted system, which can set the password field to a blank and allow an attacker to gain privileges...
CVE-1999-0336
CVE-1999-0336 describes a buffer overflow in the HP-UX mstm component that allows local users to gain root privileges. Affected software: HP-UX (mstm). Root cause: buffer overflow. Impact: local privilege escalation to root (confidentiality/integrity/availability listed as complete in CVSS). Expl...
CVE-2000-0078
The CVE-2000-0078 entry concerns the HP-UX aserver program (June 1999 version) where a local user can gain privileges by altering the PATH used by aserver to locate the awk command. Affected component: aserver; root cause is path handling allowing hijacking of the awk executable lookup. Impact, a...
CVE-2000-0005
HP-UX aserver program allows local users to gain privileges via a symlink attack...
CVE-1999-0307
Buffer overflow in HP-UX cstm program allows local users to gain root privileges...
CVE-2000-0077
The CVE-2000-0077 entry concerns the October 1998 HP-UX aserver program. It describes a local-privilege escalation where an alternate PATH is used to locate ps and grep, enabling a local attacker to gain privileges. Root cause: insecure PATH handling in the aserver’s command lookup. Impact per th...
CVE-2000-0077
The October 1998 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the ps and grep commands...
CVE-1999-0336
Buffer overflow in mstm in HP-UX allows local users to gain root access...