CVE-1999-1139

Character-Terminal User Environment CUE in HP-UX 11.0 and earlier allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the IOERROR.mytty file...

CVE-1999-0152

The DG/UX finger daemon allows remote command execution through shell metacharacters...

CVE-1999-1308

Certain programs in HP-UX 10.20 do not properly handle large user IDs UID or group IDs GID over 60000, which could allow local users to gain privileges...

CVE-1999-1408

Vulnerability in AIX 4.1.4 and HP-UX 10.01 and 9.05 allows local users to cause a denial of service crash by using a socket to connect to a port on the localhost, calling shutdown to clear the socket, then using the same socket to connect to a different port on localhost...

HP HP-UX 10.20 IBM AIX 4.1.5 - connect() Denial of Service

HP HP-UX 10.20 IBM AIX 4.1.5 - connect Denial of Service source: https://www.securityfocus.com/bid/352/info Certain versions of AIX and HP/UX contained a bug in the way the OS handled the connect system call. The connect call is used to initiate a connection on a socket. Because of the flaw in th...

HP HP-UX 10.20 / IBM AIX 4.1.5 - 'connect()' Denial of Service

source: https://www.securityfocus.com/bid/352/info Certain versions of AIX and HP/UX contained a bug in the way the OS handled the connect system call. The connect call is used to initiate a connection on a socket. Because of the flaw in the handling code under AIX certain versions will reboot wh...

CVE-1999-1160

Vulnerability in ftpd/kftpd in HP-UX 10.x and 9.x allows local and possibly remote users to gain root privileges...

CVE-1999-0309

HP-UX vgdisplay program gives root access to local users...

CVE-1999-1144

Certain files in MPower in HP-UX 10.x are installed with insecure permissions, which allows local users to gain privileges...

CVE-1999-1088

Vulnerability in chsh command in HP-UX 9.X through 10.20 allows local users to gain privileges...

CVE-1999-1145

Vulnerability in Glance programs in GlancePlus for HP-UX 10.20 and earlier allows local users to access arbitrary files and gain privileges...

CVE-1999-1311

Vulnerability in dtlogin and dtsession in HP-UX 10.20 and 10.10 allows local users to bypass authentication and gain privileges...

CVE-1999-1249

movemail in HP-UX 10.20 has insecure permissions, which allows local users to gain privileges...

CVE-1999-1251

Vulnerability in direct audio user space code on HP-UX 10.20 and 10.10 allows local users to cause a denial of service...

CVE-1999-0127

swinstall and swmodify commands in SD-UX package in HP-UX systems allow local users to create or overwrite arbitrary files to gain root access...

PT-1996-1017 · Hewlett Packard · Hp-Ux

Name of the Vulnerable Software and Affected Versions: HP-UX SD-UX package affected versions not specified Description: The issue allows local users to create or overwrite arbitrary files, potentially gaining root access, by exploiting the swinstall and swmodify commands in the SD-UX package of...

CVE-1999-1089

Buffer overflow in chfn command in HP-UX 9.X through 10.20 allows local users to gain privileges via a long command line argument...

BSD/OS 2.1 / DG/UX 4.0 / Debian 0.93 / Digital UNIX 4.0 B / FreeBSD 2.1.5 / HP-UX 10.34 / IBM AIX 4.1.5 / NetBSD 1.0/1.1 / NeXTstep 4.0 / SGI IRIX 6.3 / SunOS 4.1.4 - 'rlogin' Local Privilege Escalation

/ source: https://www.securityfocus.com/bid/242/info The SUID rlogin program is used to establish remote sessions. A buffer overflow condition has been found in the rlogin program that may allow an unauthorized user to gain root access. The overflow in particular is in the rlogin code that handle...

CVE-1999-0050

Buffer overflow in HP-UX newgrp program...

HP-UX 10.20 newgrp - Local Privilege Escalation

source: https://www.securityfocus.com/bid/683/info Due to insufficient bounds checking on user supplied arguments, it is possible to overflow an internal buffer and execute arbitrary code as root. !/usr/bin/perl use FileHandle; sub h2cs local$stuff=@; local$rv; while$stuff ! /^$/ $bob=$stuff; $bo...