Vulnerabilities (CVE)

Filtered by vendor Hp Subscribe
Filtered by product Hp-ux
Total 478 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2002-2262 1 Hp 1 Hp-ux 2025-04-03 5.0 MEDIUM N/A
Unspecified vulnerability in xntpd of HP-UX 10.20 through 11.11 allows remote attackers to cause a denial of service (hang) via unknown attack vectors.
CVE-1999-1311 1 Hp 1 Hp-ux 2025-04-03 4.6 MEDIUM N/A
Vulnerability in dtlogin and dtsession in HP-UX 10.20 and 10.10 allows local users to bypass authentication and gain privileges.
CVE-2002-1604 1 Hp 2 Hp-ux, Tru64 2025-04-03 7.5 HIGH N/A
Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to (1) csh, (2) dtsession, (3) dxsysinfo, (4) imapd, (5) inc, (6) uucp, (7) uux, (8) rdist, or (9) deliver.
CVE-1999-0962 1 Hp 1 Hp-ux 2025-04-03 7.2 HIGH N/A
Buffer overflow in HPUX passwd command allows local users to gain root privileges via a command line option.
CVE-1999-1160 1 Hp 1 Hp-ux 2025-04-03 10.0 HIGH N/A
Vulnerability in ftpd/kftpd in HP-UX 10.x and 9.x allows local and possibly remote users to gain root privileges.
CVE-2002-2138 1 Hp 2 Advanced Server 9000, Hp-ux 2025-04-03 5.0 MEDIUM N/A
RFC-NETBIOS in HP Advanced Server/9000 B.04.05 through B.04.09, when running HP-UX 11.00 or 11.11, allows remote attackers to cause a denial of service (panic) via a malformed UDP packet on port 139.
CVE-2002-1794 1 Hp 2 Hp-ux, Ldap-ux Integration 2025-04-03 10.0 HIGH N/A
Unknown vulnerability in pam_authz in the LDAP-UX Integration product on HP-UX 11.00 and 11.11 allows remote attackers to execute r-commands with privileges of other users.
CVE-2000-0251 1 Hp 2 Hp-ux, Vvos 2025-04-03 5.0 MEDIUM N/A
HP-UX 11.04 VirtualVault (VVOS) sends data to unprivileged processes via an interface that has multiple aliased IP addresses.
CVE-2001-0085 1 Hp 1 Hp-ux 2025-04-03 7.2 HIGH N/A
Buffer overflow in Kermit communications software in HP-UX 11.0 and earlier allows local users to cause a denial of service and possibly execute arbitrary commands.
CVE-1999-0688 1 Hp 1 Hp-ux 2025-04-03 4.6 MEDIUM N/A
Buffer overflows in HP Software Distributor (SD) for HPUX 10.x and 11.x.
CVE-2006-1509 1 Hp 1 Hp-ux 2025-04-03 4.9 MEDIUM N/A
/sbin/passwd in HP-UX B.11.00, B.11.11, and B.11.23 before 20060326 "does not recover gracefully from some error conditions," which allows local users to cause a denial of service.
CVE-1999-0097 3 Hp, Ibm, Sun 4 Hp-ux, Aix, Solaris and 1 more 2025-04-03 10.0 HIGH N/A
The AIX FTP client can be forced to execute commands from a malicious server through shell metacharacters (e.g. a pipe character).
CVE-1999-1238 1 Hp 1 Hp-ux 2025-04-03 4.6 MEDIUM N/A
Vulnerability in CORE-DIAG fileset in HP message catalog in HP-UX 9.05 and earlier allows local users to gain privileges.
CVE-2005-3277 1 Hp 1 Hp-ux 2025-04-03 10.0 HIGH N/A
The LPD service in HP-UX 10.20 11.11 (11i) and earlier allows remote attackers to execute arbitrary code via shell metacharacters ("`" or single backquote) in a request that is not properly handled when an error occurs, as demonstrated by killing the connection, a different vulnerability than CVE-2002-1473.
CVE-2002-0585 1 Hp 1 Hp-ux 2025-04-03 5.0 MEDIUM N/A
Unknown vulnerability in ndd for HP-UX 11.11 with certain TRANSPORT patches allows attackers to cause a denial of service.
CVE-1999-0138 7 Apple, Digital, Freebsd and 4 more 9 A Ux, Osf 1, Freebsd and 6 more 2025-04-03 7.2 HIGH N/A
The suidperl and sperl program do not give up root privileges when changing UIDs back to the original users, allowing root access.
CVE-2000-0730 1 Hp 1 Hp-ux 2025-04-03 4.6 MEDIUM N/A
Vulnerability in newgrp command in HP-UX 11.0 allows local users to gain privileges.
CVE-2004-0594 6 Avaya, Debian, Hp and 3 more 6 Converged Communications Server, Debian Linux, Hp-ux and 3 more 2025-04-03 5.1 MEDIUM N/A
The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by triggering a memory_limit abort during execution of the zend_hash_init function and overwriting a HashTable destructor pointer before the initialization of key data structures is complete.
CVE-2002-1611 1 Hp 2 Hp-ux, Tru64 2025-04-03 4.6 MEDIUM N/A
Buffer overflow in quot in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.
CVE-2000-0078 1 Hp 1 Hp-ux 2025-04-03 7.2 HIGH N/A
The June 1999 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the awk command.