CVE-1999-0524

CVE-1999-0524 is an ICMP information-disclosure vulnerability where ICMP replies reveal (1) netmask and (2) timestamp to arbitrary hosts. Connected reports link it to multiple products (e.g., Nutanix AHV advisories NXSA‑AHV series and ABB M2M Gateway plugin) and describe the issue as an informati...

CVE-2002-1614

CVE-2002-1614 concerns a buffer overflow in HP Tru64 UNIX that allows local users to execute arbitrary code via a long argument to /usr/bin/at. The NVD entry confirms a local AV, low complexity, with complete confidentiality/integrity/availability impacts. Connected records corroborate the vulner...

CVE-2002-1615

HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f contain multiple buffer overflows that allow local users to execute arbitrary code via two vectors: (1) msgchk and (2) .upd..loader. The CVE entry identifies the affected platforms and the nature of the flaw (buffer overflows) and states the impact is...

CVE-2006-5452

CVE-2006-5452 affects dtmail on HP Tru64 UNIX 4.0F–5.1B and HP-UX B.11.00–B.11.23, where a buffer overflow allows local users to execute arbitrary code via a long -a attachment argument. The issue is triggered within dtmail’s handling of attachments, enabling local code execution with the user’s ...

CVE-2002-1613

Technical details for CVE-2002-1613 are not publicly available in the provided documents. The initial description notes a buffer overflow affecting HP Tru64 UNIX, but no vendor/version specifics, impact, or fixes are provided here. Monitor for updates.

CVE-2007-2553

CVE-2007-2553 affects HP Tru64 UNIX 5.1B-4, 5.1B-3, and 5.1A PK6. The issue is an unspecified vulnerability that lets local users gain privileges by providing a large amount of data in the environment, demonstrated by a long environment variable. The connected sources confirm the affected version...

CVE-2007-2791

CVE-2007-2791 affects HP Tru64 UNIX 5.1B-3 and 5.1B-4. The provided documents describe an unspecified vulnerability in SSH that could allow remote attackers to identify valid users, likely via timing-related vectors such as AuthInteractiveFailureRandomTimeout. Public proof-of-concept material exi...

CVE-2000-1031

Technical details of CVE-2000-1031 are not publicly provided in the supplied documents; monitor for updates.

CVE-2002-1607

The CVE-2002-1607 entry describes a local-privilege escalation vulnerability in HP Tru64 UNIX: a buffer overflow in the ypmatch component affects Tru64 UNIX versions 5.1a, 5.1, 5.0a, 4.0g, and 4.0f, which could allow a local user to execute arbitrary code. The available sources confirm the affect...

CVE-2008-4414

CVE-2008-4414 affects HP Tru64 UNIX 5.1B-3 and 5.1B-4 where the AdvFS showfile command contains a local privilege escalation vulnerability. The HP security bulletin and NVD entries describe an exploit vector limited to local users that could grant extended privileges via unspecified vectors, with...

CVE-2002-1605

A buffer overflow in HP Tru64 UNIX (versions 4.0f, 4.0g, 5.0a, 5.1, 5.1a) allows an attacker to execute arbitrary code by supplying a long _XKB_CHARSET environment variable that affects dxpause, dxconsole, or dtsession. Root cause: improper handling of environment data in these components. Impact...

CVE-2003-1496

CVE-2003-1496 concerns an unspecified local privilege escalation vulnerability in HP Tru64’s CDE dtmailpr (4.0F–5.1B). Connected data clarifies a related issue (CVE-1999-0840) with a documented buffer overflow in CDE dtmail and dtmailpr that enables local privilege gain via a long -f option. Whil...

CVE-2007-0805

HP Tru64 UNIX 5.1 1885 is affected by CVE-2007-0805 via the ps command (/usr/ucb/ps) exposing environment variables of arbitrary processes when using the auxewww argument. The issue stems from local information disclosure; it is described as a family with CVE-1999-1587. Connected sources corrobor...

CVE-2002-1609

CVE-2002-1609 describes a buffer overflow in HP Tru64 UNIX binmail affecting versions 5.1a, 5.1, 5.0a, 4.0g, and 4.0f, allowing local users to gain privileges. The connected documents confirm the affected product and the local-privilege-escalation impact but do not provide any remediation, patch ...

CVE-2005-2993

CVE-2005-2993 affects HP-UX ftpd and related FTP Daemon implementations, with reported remote DoS (hang) condition. The NVD entry lists an unspecified vulnerability in ftpd for HP Tru64 UNIX 4.0F PK8 and later, plus HP-UX B.11.00, B.11.04, B.11.11, and B.11.23, exploitable by remote authenticated...

CVE-2002-1604

HP Tru64 UNIX is affected by CVE-2002-1604 due to multiple buffer overflows triggered by a long NLSPATH environment variable. The exploitation targets 9 programs (csh, dtsession, dxsysinfo, imapd, inc, uucp, uux, rdist, deliver). The underlying issue is a vulnerability in handling NLSPATH that co...

CVE-2002-1606

CVE-2002-1606 details multiple local buffer-overflow vulnerabilities in HP Tru64 UNIX (versions 5.1a, 5.1, 5.0a, 4.0g, 4.0f) affecting the printing utilities (lpc, lpd, lpq, lpr, lprm). Root cause: unchecked/overrun buffers in these programs allow local users to escalate privileges. Impact: local...

CVE-2002-1608

This CVE concerns a local buffer overflow in traceroute on HP Tru64 UNIX, affecting versions 5.1a, 5.1, 5.0a, 4.0g, and 4.0f. The underlying issue is a buffer overflow in the traceroute routine that allows a local user to execute arbitrary code. The available documents state the vulnerability but...

CVE-2002-1474

Technical details for CVE-2002-1474 are not publicly available in the provided documents. The materials only repeat a generic denial-of-service description for HP Tru64 UNIX TCP/IP. Monitor for updates; no vendor, impact, or remediation details are disclosed here.

CVE-2003-0221

The CVE-2003-0221 entry concerns HP Tru64 UNIX 5.1B PK1 and earlier, where the (1) dupatch and (2) setld utilities are vulnerable to a local symlink attack that allows overwriting files and could lead to root privilege gain. Affected components are dupatch and setld; root-priority impact is state...

CVE-2005-0719

The CVE-2005-0719 entry concerns an unknown vulnerability in the systems message queue of HP Tru64 Unix, affecting versions 4.0F PK8 through 5.1B-2/PK4. The issue enables local users to trigger a denial of service by crashing processes (e.g., nfsstat, pfstat, arp, ogated, rarpd, route, sendmail, ...

CVE-2005-3670

CVE-2005-3670 covers multiple unspecified IKEv1 vulnerabilities in HP-UX IPSec, HP Jetdirect 635n, and HP Tru64 UNIX implementations that allow remote DoS via certain IKE packets (PROTOS IKEv1 test). The HP advisory does not specify which sub-CVE (CVE-2005-3666/3667/3668) applies. Related connect...

CVE-2006-6418

CVE-2006-6418 refers to a buffer overflow in the POSIX Threads library (libpthread) on HP Tru64 UNIX, affecting 4.0F PK8, 4.0G PK4, and 5.1A PK6. The vulnerability arises from a long PTHREAD_CONFIG environment variable and allows local users to gain root privileges. This is a local-privilege-esca...

CVE-2002-1475

HP Tru64 UNIX ARP component (versions 4.0f, 4.0g, 5.0a) is described as having an unknown vulnerability that allows remote attackers to take over packets destined for another host and cause a denial of service. The available sources do not provide concrete technical details such as root cause, sp...

CVE-2002-1610

Technical details for CVE-2002-1610 are not publicly available in the provided documents. Monitor for updates.

CVE-2002-1617

The CVE-2002-1617 entry concerns HP Tru64 UNIX 5.x with multiple local buffer overflow vulnerabilities. The affected components are dtaction (long -contextDir), dtprintinfo (long -p), dxterm (long -customization), and dtterm (long DISPLAY env var). The root cause is buffer overflows leading to ar...

CVE-2002-1784

CVE-2002-1784 affects HP Tru64 UNIX: inetd in versions 4.0f through 5.1a is reported to allow remote denial of service via unknown attack vectors. The Red Hat entry and other records confirm the same vulnerability description, but no concrete root cause, exploit details, or official patch/version...

CVE-2002-1611

CVE-2002-1611 describes a local privilege escalation in HP Tru64 UNIX, via a buffer overflow in the quot utility affecting multiple Tru64 UNIX releases (5.1a, 5.1, 5.0a, 4.0g, 4.0f). The root cause is a vulnerability in quot that could allow local users to gain privileges. Public exploitation det...

CVE-2002-1616

CVE-2002-1616 describes multiple buffer overflows in HP Tru64 UNIX affecting versions 5.1a, 5.1, 5.0a, 4.0g, and 4.0f. The vulnerability allows local users to escalate privileges to root via several utilities: (1) su, (2) chsh, (3) passwd, (4) chfn, (5) dxchpwd, and (6) libc. The description iden...

CVE-2004-2678

Technical details about CVE-2004-2678 are not publicly available in the provided documents. No explicit affected products, versions, or impact are documented here. Monitor for updates from official sources.

CVE-2002-1612

CVE-2002-1612 describes a buffer overflow in the mailcv utility of HP Tru64 UNIX, spanning versions 5.1a, 5.1, 5.0a, 4.0g, and 4.0f. The vulnerability enables local users to gain privileges due to the overflow in mailcv. The available documents confirm the affected product and the attack vector a...

CVE-2007-6519

The CVE concerns HP Tru64 UNIX, specifically the File-on-File Mounting File System (FFM) in versions 5.1B-4 and 5.1B-3. The vulnerability is described as unspecified and locally exploitable, causing a denial of service (system crash) via unspecified vectors. The connected documents do not provide...