HP
Page 25 of 26 — HP CVEs from a corpus of 2519, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2000-1062 | | 2000-12-11 | Buffer overflow in the FTP service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service. | |
CVE-2000-1058 | | 2000-12-11 | Buffer overflow in OverView5 CGI program in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows remote attackers to cause a denial of service, and po… | |
CVE-2000-1057 | | 2000-12-11 | Vulnerabilities in database configuration scripts in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows local users to gain privileges, possibly via… | |
CVE-2000-1031 | | 2000-12-11 | Buffer overflow in dtterm in HP-UX 11.0 and HP Tru64 UNIX 4.0f through 5.1a allows local users to execute arbitrary code via a long -tn option. | |
CVE-2000-1028 | | 2000-12-11 | Buffer overflow in cu program in HP-UX 11.0 may allow local users to gain privileges via a long -l command line argument. | |
CVE-2000-0801 | | 2000-10-20 | Buffer overflow in bdf program in HP-UX 11.00 may allow local users to gain root privileges via a long -t option. | |
CVE-2000-0755 | | 2000-10-20 | Vulnerability in the newgrp command in HP-UX 11.00 allows local users to gain privileges. | |
CVE-2000-0754 | | 2000-10-20 | Vulnerability in HP OpenView Network Node Manager (NMM) version 6.1 related to passwords. | |
CVE-2000-0730 | | 2000-10-20 | Vulnerability in newgrp command in HP-UX 11.0 allows local users to gain privileges. | |
CVE-2000-0702 | | 2000-10-20 | The net.init rc script in HP-UX 11.00 (S008net.init) allows local users to overwrite arbitrary files via a symlink attack that points from /tmp/stcp.conf to th… | |
CVE-2000-0699 | | 2000-10-20 | Format string vulnerability in ftpd in HP-UX 10.20 allows remote attackers to cause a denial of service or execute arbitrary commands via format strings in the… | |
CVE-2000-0636 | | 2000-07-19 | HP JetDirect printers versions G.08.20 and H.08.20 and earlier allow remote attackers to cause a denial of service via a malformed FTP quote command. | |
CVE-2000-0573 | | 2000-07-07 | The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary comma… | |
CVE-2000-0616 | | 2000-06-26 | Vulnerability in HP TurboIMAGE DBUTIL allows local users to gain additional privileges via DBUTIL.PUB.SYS. | |
CVE-2000-0515 | | 2000-06-07 | The snmpd.conf configuration file for the SNMP daemon (snmpd) in HP-UX 11.0 is world writable, which allows local users to modify SNMP configuration or gain pr… | |
CVE-2000-0558 | | 2000-06-06 | Buffer overflow in HP Openview Network Node Manager 6.1 allows remote attackers to execute arbitrary commands via the Alarm service (OVALARMSRV) on port 2345. | |
CVE-2000-0468 | | 2000-06-02 | man in HP-UX 10.20 and 11 allows local attackers to overwrite files via a symlink attack. | |
CVE-2000-0444 | | 2000-05-24 | HP Web JetAdmin 6.0 allows remote attackers to cause a denial of service via a malformed URL to port 8000. | |
CVE-2000-0443 | | 2000-05-24 | The web interface server in HP Web JetAdmin 5.6 allows remote attackers to read arbitrary files via a .. (dot dot) attack. | |
CVE-2000-0414 | | 2000-05-04 | Vulnerability in shutdown command for HP-UX 11.X and 10.X allows allows local users to gain privileges via malformed input variables. | |
CVE-2000-0083 | | 2000-04-18 | HP asecure creates the Audio Security File audio.sec with insecure permissions, which allows local users to cause a denial of service or gain additional privil… | |
CVE-2000-0251 | | 2000-04-06 | HP-UX 11.04 VirtualVault (VVOS) sends data to unprivileged processes via an interface that has multiple aliased IP addresses. | |
CVE-1999-0693 | | 2000-03-02 | Buffer overflow in TT_SESSION environment variable in ToolTalk shared library allows local users to gain root privileges. | |
CVE-2000-0179 | | 2000-02-28 | HP OpenView OmniBack 2.55 allows remote attackers to cause a denial of service via a large number of connections to port 5555. | |
CVE-2000-0159 | | 2000-02-17 | HP Ignite-UX does not save /etc/passwd when it creates an image of a trusted system, which can set the password field to a blank and allow an attacker to gain… | |
CVE-2000-0095 | | 2000-01-24 | The PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU generates large amounts of traffic in response to small packets, all… | |
CVE-1999-0992 | | 2000-01-18 | HP VirtualVault with the PHSS_17692 patch allows unprivileged processes to bypass access restrictions via the Trusted Gateway Proxy (TGP). | |
CVE-2000-0078 | | 2000-01-02 | The June 1999 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the awk com… | |
CVE-2000-0077 | | 2000-01-02 | The October 1998 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the ps a… | |
CVE-1999-1324 | Critical | 9.8 | 1999-12-31 | VAXstations running Open VMS 5.3 through 5.5-2 with VMS DECwindows or MOTIF do not properly disable access to user accounts that exceed the break-in limit thre… |
CVE-1999-1573 | | 1999-12-28 | Multiple unknown vulnerabilities in the "r-cmnds" (1) remshd, (2) rexecd, (3) rlogind, (4) rlogin, (5) remsh, (6) rcp, (7) rexec, and (8) rdist for HP-UX 10.00… | |
CVE-1999-1163 | | 1999-11-24 | Vulnerability in HP Series 800 S/X/V Class servers allows remote attackers to gain access to the S/X/V Class console via the Service Support Processor (SSP) Te… | |
CVE-1999-0829 | | 1999-11-01 | HP Secure Web Console uses weak encryption. | |
CVE-1999-0707 | | 1999-07-01 | The default FTP configuration in HP Visualize Conference allows conference users to send a file to other participants without authorization. | |
CVE-1999-0696 | | 1999-07-01 | Buffer overflow in CDE Calendar Manager Service Daemon (rpc.cmsd). | |
CVE-1999-0690 | | 1999-07-01 | HP CDE program includes the current directory in root's PATH variable. | |
CVE-1999-0688 | | 1999-07-01 | Buffer overflows in HP Software Distributor (SD) for HPUX 10.x and 11.x. | |
CVE-1999-0686 | | 1999-05-07 | Denial of service in Netscape Enterprise Server (NES) in HP Virtual Vault (VVOS) via a long URL. | |
CVE-1999-0684 | | 1999-04-19 | Denial of service in Sendmail 8.8.6 in HPUX. | |
CVE-1999-0447 | | 1999-04-01 | Local users can gain privileges using the debug utility in the MPE/iX operating system. | |
CVE-1999-0479 | | 1999-03-01 | Denial of service Netscape Enterprise Server with VirtualVault on HP-UX VVOS systems. | |
CVE-1999-0436 | | 1999-03-01 | Domain Enterprise Server Management System (DESMS) in HP-UX allows local users to gain privileges. | |
CVE-1999-0435 | | 1999-03-01 | MC/ServiceGuard and MC/LockManager in HP-UX allows local users to gain privileges through SAM. | |
CVE-1999-0432 | | 1999-03-01 | ftp on HP-UX 11.00 allows local users to gain privileges. | |
CVE-1999-1247 | | 1999-02-24 | Vulnerability in HP Camera component of HP DCE/9000 in HP-UX 9.x allows attackers to gain root privileges. | |
CVE-1999-0353 | | 1999-02-10 | rpc.pcnfsd in HP gives remote root access by changing the permissions on the main printer spool directory. | |
CVE-2000-0005 | | 1999-01-02 | HP-UX aserver program allows local users to gain privileges via a symlink attack. | |
CVE-1999-0057 | | 1998-11-16 | Vacation program allows command execution by remote users through a sendmail command. | |
CVE-1999-0779 | | 1998-09-03 | Denial of service in HP-UX SharedX recserv program. | |
CVE-1999-0333 | | 1998-08-01 | HP OpenView Omniback allows remote execution of commands as root via spoofing, and local users can gain root access via a symlink attack. | |
CVE-1999-1136 | | 1998-07-30 | Vulnerability in Predictive on HP-UX 11.0 and earlier, and MPE/iX 5.5 and earlier, allows attackers to compromise data transfer for Predictive messages (using… | |
CVE-1999-1433 | | 1998-07-15 | HP JetAdmin D.01.09 on Solaris allows local users to change the permissions of arbitrary files via a symlink attack on the /tmp/jetadmin.log file. | |
CVE-1999-0007 | | 1998-06-26 | Information from SSL-encrypted sessions via PKCS #1. | |
CVE-1999-0008 | | 1998-06-08 | Buffer overflow in NIS+, in Sun's rpc.nisd program. | |
CVE-1999-0551 | | 1998-04-01 | HP OpenMail can be misconfigured to allow users to run arbitrary commands using malicious print requests. | |
CVE-1999-0003 | | 1998-04-01 | Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd). | |
CVE-1999-0502 | | 1998-03-01 | A Unix account has a default, null, blank, or missing password. | |
CVE-1999-0014 | | 1998-01-21 | Unauthorized privileged access or denial of service via dtappgather program in CDE. | |
CVE-1999-0513 | | 1998-01-05 | ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service. | |
CVE-1999-0104 | | 1997-12-16 | A later variation on the Teardrop IP denial of service attack, a.k.a. Teardrop-2. | |
CVE-1999-0015 | | 1997-12-16 | Teardrop IP denial of service. | |
CVE-1999-0004 | | 1997-12-16 | MIME buffer overflow in email clients, e.g. Solaris mailtool and Outlook. | |
CVE-1999-0016 | | 1997-12-01 | Land IP denial of service. | |
CVE-1999-0306 | | 1997-11-04 | buffer overflow in HP xlock program. | |
CVE-1999-0216 | | 1997-11-01 | Denial of service of inetd on Linux through SYN and RST packets. | |
CVE-1999-0097 | | 1997-10-29 | The AIX FTP client can be forced to execute commands from a malicious server through shell metacharacters (e.g. a pipe character). | |
CVE-1999-1062 | | 1997-10-04 | HP Laserjet printers with JetDirect cards, when configured with TCP/IP, allow remote attackers to bypass print filters by directly sending PostScript documents… | |
CVE-1999-1061 | | 1997-10-04 | HP Laserjet printers with JetDirect cards, when configured with TCP/IP, can be configured without a password, which allows remote attackers to connect to the p… | |
CVE-1999-1213 | | 1997-10-01 | Vulnerability in telnet service in HP-UX 10.30 allows attackers to cause a denial of service. | |
CVE-1999-0326 | | 1997-10-01 | Vulnerability in HP-UX mediainit program. | |
CVE-1999-1139 | | 1997-09-01 | Character-Terminal User Environment (CUE) in HP-UX 11.0 and earlier allows local users to overwrite arbitrary files and gain root privileges via a symlink atta… | |
CVE-1999-1133 | | 1997-09-01 | HP-UX 9.x and 10.x running X windows may allow local attackers to gain privileges via (1) vuefile, (2) vuepad, (3) dtfile, or (4) dtpad, which do not authentic… | |
CVE-1999-0524 | Medium | 4.0 | 1997-08-01 | ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts. |
CVE-1999-1308 | | 1997-07-31 | Certain programs in HP-UX 10.20 do not properly handle large user IDs (UID) or group IDs (GID) over 60000, which could allow local users to gain privileges. | |
CVE-1999-0962 | | 1997-05-14 | Buffer overflow in HPUX passwd command allows local users to gain root privileges via a command line option. | |
CVE-1999-0040 | | 1997-05-01 | Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges. | |
CVE-1999-0038 | High | 8.4 | 1997-04-26 | Buffer overflow in xlock program allows local users to execute commands as root. |
CVE-1999-1408 | | 1997-03-05 | Vulnerability in AIX 4.1.4 and HP-UX 10.01 and 9.05 allows local users to cause a denial of service (crash) by using a socket to connect to a port on the local… | |
CVE-1999-0318 | | 1997-03-01 | Buffer overflow in xmcd 2.0p12 allows local users to gain access through an environmental variable. | |
CVE-1999-0046 | | 1997-02-06 | Buffer overflow of rlogin program using TERM environmental variable. | |
CVE-1999-1160 | | 1997-02-02 | Vulnerability in ftpd/kftpd in HP-UX 10.x and 9.x allows local and possibly remote users to gain root privileges. | |
CVE-1999-0309 | | 1997-02-01 | HP-UX vgdisplay program gives root access to local users. | |
CVE-1999-1144 | | 1997-01-30 | Certain files in MPower in HP-UX 10.x are installed with insecure permissions, which allows local users to gain privileges. | |
CVE-1999-1088 | | 1997-01-09 | Vulnerability in chsh command in HP-UX 9.X through 10.20 allows local users to gain privileges. | |
CVE-1999-1311 | | 1997-01-07 | Vulnerability in dtlogin and dtsession in HP-UX 10.20 and 10.10 allows local users to bypass authentication and gain privileges. | |
CVE-1999-1145 | | 1997-01-07 | Vulnerability in Glance programs in GlancePlus for HP-UX 10.20 and earlier allows local users to access arbitrary files and gain privileges. | |
CVE-1999-1249 | | 1997-01-06 | movemail in HP-UX 10.20 has insecure permissions, which allows local users to gain privileges. | |
CVE-1999-0517 | Medium | 5.9 | 1997-01-01 | An SNMP community name is the default (e.g. public), null, or missing. |
CVE-1999-1251 | | 1996-12-24 | Vulnerability in direct audio user space code on HP-UX 10.20 and 10.10 allows local users to cause a denial of service. | |
CVE-1999-0127 | | 1996-12-19 | swinstall and swmodify commands in SD-UX package in HP-UX systems allow local users to create or overwrite arbitrary files to gain root access. | |
CVE-1999-1089 | | 1996-12-13 | Buffer overflow in chfn command in HP-UX 9.X through 10.20 allows local users to gain privileges via a long command line argument. | |
CVE-1999-0129 | | 1996-12-03 | Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file. | |
CVE-1999-0050 | | 1996-12-01 | Buffer overflow in HP-UX newgrp program. | |
CVE-1999-0130 | | 1996-11-16 | Local users can start Sendmail in daemon mode and gain root privileges. | |
CVE-1999-1161 | | 1996-11-03 | Vulnerability in ppl in HP-UX 10.x and earlier allows local users to gain root privileges by forcing ppl to core dump. | |
CVE-1999-0336 | | 1996-11-01 | Buffer overflow in mstm in HP-UX allows local users to gain root access. | |
CVE-1999-0311 | | 1996-11-01 | fpkg2swpk in HP-UX allows local users to gain root access. | |
CVE-1999-0308 | | 1996-10-01 | HP-UX gwind program allows users to modify arbitrary files. | |
CVE-1999-0246 | | 1996-10-01 | HP Remote Watch allows a remote user to gain root access. | |
CVE-1999-0961 | | 1996-09-21 | HPUX sysdiag allows local users to gain root privileges via a symlink attack during log file creation. |