CVE-2004-0492

Apache mod_proxy vulnerability CVE-2004-0492 is a heap-based overflow in proxy_util.c affecting Apache 1.3.25–1.3.31. A remote attacker can trigger a denial of service (process crash) and possibly execute arbitrary code by sending a negative Content-Length header, causing excessive data copy. The...

CVE-1999-0014

CVE-1999-0014 affects the dtappgather component of CDE. The connected records consistently describe the issue as enabling unauthorized privileged access or denial of service via dtappgather. The available documents do not provide specifics on affected products, versions, root cause details, explo...

CVE-2000-0251

HP-UX 11.04 VirtualVault (VVOS) is affected by CVE-2000-0251. The issue involves VVOS sending data to unprivileged processes via an interface that has multiple aliased IP addresses. This exposes sensitive data to unprivileged processes, with the documented impact indicating partial integrity comp...

CVE-1999-0057

The CVE refers to the HP-UX vacation program allowing remote command execution by sending crafted input that causes the Vacation utility to pass arbitrary parameters to sendmail. The issue is associated with HP patch PHNE_16295 for s700/s800 11.00 (HP-UX Vacation patch), indicating the remediatio...

CVE-2001-1244

Technical details such as affected products, versions, and root cause are not publicly provided in the connected documents. Monitor CVE-2001-1244 updates for concrete details.

CVE-2002-1793

The CVE-2002-1793 entry concerns HP-UX 11.04 running VirtualVault OS (VVOS) 4.5–4.6 with the HTTP Server mod_ssl module. The vulnerability arises when the Apache server times out during an SSL request, causing the connection to be closed, which may enable a denial-of-service condition. The Red Ha...

CVE-2004-1332

CVE-2004-1332 is a stack-based buffer overflow in HP-UX 11.x FTP daemon ftpd (enabled with -v) that allows remote code execution via a long command. Connected OpenVAS/Nessus entries document multiple HP patches (PHNE_24395/29460/29461/29462/23949/23950/31034, etc.) addressing ftpd/ftp buffer hand...

CVE-2000-0414

The CVE-2000-0414 entry describes a local privilege escalation in HP-UX 11.X/10.X caused by a flaw in the shutdown command’s handling of input variables. A local attacker could exploit malformed input to gain elevated privileges. The available sources confirm the affected component (shutdown comm...

CVE-2001-1264

HP-UX 11.04 running VirtualVault Operating System (VVOS) 4.0/4.5 contains a privilege-escalation vulnerability in the /sbin/mkacct program (mkacct) that could allow unauthorized privileged access. The issue is documented under CVE-2001-1264 and is referenced by HP Security Bulletin #0161. Remedia...

CVE-1999-0306

CVE-1999-0306 describes a buffer overflow in HP xlock. The available connected records confirm the affected software (HP xlock) and classify the flaw as a buffer overflow with local attack vector, no authentication, and low attack complexity, potentially impacting confidentiality, integrity, and ...

CVE-2000-0965

The CVE-2000-0965 entry affects HP-UX VVOS 10.24 and 11.04, where the NSAPI plugins for TGA and the Java Servlet proxy are the vulnerable components. The underlying issue is a condition that allows an attacker to cause a denial of service via high CPU utilization. No explicit remediation or patch...

CVE-2002-1408

CVE-2002-1408 concerns HP OpenView EMANATE 14.2 snmpModules where the SNMP read-write community name can be exposed, related to (1) 'read-only' community access, and/or (2) an easily guessable community name. This exposure could enable unauthorized SNMP read/write access to affected data and conf...

CVE-1999-0992

CVE-1999-0992 affects HP VirtualVault with the PHSS_17692 patch. The issue is a bypass of access restrictions via the Trusted Gateway Proxy (TGP), enabling unprivileged processes to gain restricted access. The vulnerability is tied to HP VirtualVault and the TGP configuration as described in the ...

CVE-2002-1439

CVE-2002-1439 describes a stack corruption issue in the TGA daemon used by HP-UX 11.04 (VVOS) Virtualvault, affecting versions 4.0, 4.5, and 4.6. The vulnerability may allow an attacker to obtain access to system files. The public sources provided do not specify a vendor, exploit details, specifi...