CVE-2000-0159

CVE-2000-0159 affects HP Ignite-UX. The issue: when imaging a trusted system, Ignite-UX does not save /etc/passwd, which can leave the password field blank and enable privilege escalation. The description and connected documents confirm the vulnerable component and the underlying behavior, but do...

CVE-2000-0159: Undefined Security Weakness

HP Ignite-UX does not save /etc/passwd when it creates an image of a trusted system, which can set the password field to a blank and allow an attacker to gain privileges...

CVE-2000-0095: Undefined Security Weakness

The PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU generates large amounts of traffic in response to small packets, allowing remote attackers to cause the system to be used as a packet amplifier...

Local root compromise in GNQS 3.50.6 and 3.50.7

A large security hole was uncovered last month in Generic-NQS ver. 3.50.6 and 3.50.7. This hole leads to immediate local root compromise. All users of those versions are requested to upgrade to ver. 3.50.8 or later ASAP. The updated package can be downloaded from...

CVE-2000-0251

HP-UX 11.04 VirtualVault VVOS sends data to unprivileged processes via an interface that has multiple aliased IP addresses...

Data General DG/UX 5.4 - inetd Service Exhaustion Denial of Service

source: https://www.securityfocus.com/bid/1071/info A Denial of service DoS attack is possible with the default version of inetd distributed with Data General's DG/UX operating system. By performing a scan utilizing nmap's OS detection option -O, the inetd daemon is put in a state where it will n...

CVE-2000-0159

HP Ignite-UX does not save /etc/passwd when it creates an image of a trusted system, which can set the password field to a blank and allow an attacker to gain privileges...

CVE-2000-0078

The CVE-2000-0078 entry concerns the HP-UX aserver program (June 1999 version) where a local user can gain privileges by altering the PATH used by aserver to locate the awk command. Affected component: aserver; root cause is path handling allowing hijacking of the awk executable lookup. Impact, a...

CVE-2000-0078

The June 1999 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the awk command...

CVE-1999-0336

Buffer overflow in mstm in HP-UX allows local users to gain root access...

CVE-2000-0077

The October 1998 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the ps and grep commands...

CVE-2000-0077

The CVE-2000-0077 entry concerns the October 1998 HP-UX aserver program. It describes a local-privilege escalation where an alternate PATH is used to locate ps and grep, enabling a local attacker to gain privileges. Root cause: insecure PATH handling in the aserver’s command lookup. Impact per th...

CVE-1999-0127

swinstall and swmodify commands in SD-UX package in HP-UX systems allow local users to create or overwrite arbitrary files to gain root access...

CVE-1999-0336

CVE-1999-0336 describes a buffer overflow in the HP-UX mstm component that allows local users to gain root privileges. Affected software: HP-UX (mstm). Root cause: buffer overflow. Impact: local privilege escalation to root (confidentiality/integrity/availability listed as complete in CVSS). Expl...

CVE-2000-0005

HP-UX aserver program contains a local privilege-escalation vulnerability via a symlink attack. Affected component: HP-UX aserver. Root cause: symlink manipulation allowing local users to gain privileges (CVE-2000-0005). Impact: complete confidentiality, integrity, and availability for the attack...

CVE-1999-0435

MC/ServiceGuard and MC/LockManager in HP-UX allows local users to gain privileges through SAM...

CVE-1999-0307

Buffer overflow in HP-UX cstm program allows local users to gain root privileges...

CVE-1999-0127

CVE-1999-0127 affects HP-UX systems with the SD-UX package, where the commands swinstall and swmodify allow local users to create or overwrite arbitrary files to gain root access. The vulnerability is described across multiple sources (HP-UX SD-UX, Red Hat Security, CVE records) as a local privil...

CVE-2000-0005

HP-UX aserver program allows local users to gain privileges via a symlink attack...

CVE-1999-0307

HP-UX cstm buffer overflow allows local users to gain root privileges. Affected: cstm program on HP-UX; root-level escalation via local exploit. Some sources note no available fix information; no exploitation details provided in docs.