CVE-1999-0435

CVE-1999-0435 affects HP-UX MC/ServiceGuard and MC/LockManager. The root cause is an improper implementation of restricted SAM functionality, enabling local users to gain elevated privileges. What’s affected: HP-UX MC/ServiceGuard and MC/LockManager components, with listed patches PHSS_17581 (and...

CVE-2000-0077

The October 1998 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the ps and grep commands...

CVE-2000-0077

The CVE-2000-0077 entry concerns the October 1998 HP-UX aserver program. It describes a local-privilege escalation where an alternate PATH is used to locate ps and grep, enabling a local attacker to gain privileges. Root cause: insecure PATH handling in the aserver’s command lookup. Impact per th...

CVE-1999-0307

HP-UX cstm buffer overflow allows local users to gain root privileges. Affected: cstm program on HP-UX; root-level escalation via local exploit. Some sources note no available fix information; no exploitation details provided in docs.

CVE-1999-0127

CVE-1999-0127 affects HP-UX systems with the SD-UX package, where the commands swinstall and swmodify allow local users to create or overwrite arbitrary files to gain root access. The vulnerability is described across multiple sources (HP-UX SD-UX, Red Hat Security, CVE records) as a local privil...

CVE-2000-0078

The June 1999 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the awk command...

CVE-2000-0005

HP-UX aserver program contains a local privilege-escalation vulnerability via a symlink attack. Affected component: HP-UX aserver. Root cause: symlink manipulation allowing local users to gain privileges (CVE-2000-0005). Impact: complete confidentiality, integrity, and availability for the attack...

CVE-1999-0127

swinstall and swmodify commands in SD-UX package in HP-UX systems allow local users to create or overwrite arbitrary files to gain root access...

CVE-2000-0078

The CVE-2000-0078 entry concerns the HP-UX aserver program (June 1999 version) where a local user can gain privileges by altering the PATH used by aserver to locate the awk command. Affected component: aserver; root cause is path handling allowing hijacking of the awk executable lookup. Impact, a...

CVE-1999-0336

Buffer overflow in mstm in HP-UX allows local users to gain root access...

CVE-1999-0307

Buffer overflow in HP-UX cstm program allows local users to gain root privileges...

CVE-2000-0095

The PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU generates large amounts of traffic in response to small packets, allowing remote attackers to cause the system to be used as a packet amplifier...

CVE-1999-0779

CVE-1999-0779 is a denial-of-service issue affecting HP-UX SharedX recserv. Connected sources specify the affected platform as HP-UX s700_800 (11.00) with Receiver Services and reference patch PHSS_16649 (HPSS_16649) from October 1998 to remediate. Other entries (Red Hat, NVD, Nessus plugin) reit...

CVE-1999-0779

Denial of service in HP-UX SharedX recserv program...

CVE-2000-0077

The October 1998 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the ps and grep commands...

CVE-2000-0078

The June 1999 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the awk command...

Nortel Networks Optivity NETarchitect 2.0 - PATH

Nortel Networks Optivity NETarchitect 2.0 - PATH source: https://www.securityfocus.com/bid/907/info NETarchitect is an application for simplifying the task of designing and deploying complex switched network system configurations, produced by Nortel Networks and usually shipped with the Optivity...

Nortel Networks Optivity NETarchitect 2.0 - PATH

source: https://www.securityfocus.com/bid/907/info NETarchitect is an application for simplifying the task of designing and deploying complex switched network system configurations, produced by Nortel Networks and usually shipped with the Optivity Network Configuration System suite of utilities. ...

CVE-1999-1573

Multiple unknown vulnerabilities in the "r-cmnds" 1 remshd, 2 rexecd, 3 rlogind, 4 rlogin, 5 remsh, 6 rcp, 7 rexec, and 8 rdist for HP-UX 10.00 through 11.00 allow attackers to gain privileges or access files...

Sun Solaris 7.0 - rpc.ttdbserver Denial of Service

Sun Solaris 7.0 - rpc.ttdbserver Denial of Service // source: https://www.securityfocus.com/bid/811/info It is possible to crash rpc.ttdbserver by using the old tddbserver buffer overflow exploit. This problem is caused by a NULL pointer being dereferenced when rpc function 15 is called with...