Mpe Ix Security Vulnerabilities - May

CVE-1999-0447

Local users can gain privileges using the debug utility in the MPE/iX operating system.

CVE-2000-0616

Vulnerability in HP TurboIMAGE DBUTIL allows local users to gain additional privileges via DBUTIL.PUB.SYS.

CVE-2001-0267

NM debug in HP MPE/iX 6.5 and earlier does not properly handle breakpoints, which allows local users to gain privileges.

CVE-2001-0278

Vulnerability in linkeditor in HP MPE/iX 6.5 and earlier allows local users to gain privileges.

CVE-2002-0609

Vulnerability in HP MPE/iX 6.0 through 7.0 allows attackers to cause a denial of service (system failure with "SA1457 out of i_port_timeout.fix_up_message_frame") via malformed IP packets.

CVE-2002-0610

Vulnerability in FTPSRVR in HP MPE/iX 6.0 through 7.0 does not properly validate certain FTP commands, which allows attackers to gain privileges.