Hp: Security Vulnerabilities
Vulnerability in Support Tools Manager (xstm,cstm,stm) in HP-UX 11.11 and earlier allows local users to cause a denial of service.
CVSS Score
2.1
EPSS Score
0.001
Published
2001-03-26
Buffer overflow in the text editor functionality in HP-UX 10.01 through 11.04 on HP9000 Series 700 and Series 800 allows local users to cause a denial of service ("system availability") via text editors such as (1) e, (2) ex, (3) vi, (4) edit, (5) view, and (6) vedit.
CVSS Score
2.1
EPSS Score
0.001
Published
2001-02-16
Support Tools Manager (STM) A.22.00 for HP-UX allows local users to overwrite arbitrary files via a symlink attack on the tool_stat.txt log file.
CVSS Score
2.1
EPSS Score
0.003
Published
2001-02-12
Buffer overflow in Kermit communications software in HP-UX 11.0 and earlier allows local users to cause a denial of service and possibly execute arbitrary commands.
CVSS Score
7.2
EPSS Score
0.001
Published
2001-02-12
Vulnerability in top in HP-UX 11.04 and earlier allows local users to overwrite files owned by the "sys" group.
CVSS Score
2.1
EPSS Score
0.003
Published
2001-02-12
Vulnerability in inetd server in HP-UX 11.04 and earlier allows attackers to cause a denial of service when the "swait" state is used by a server.
CVSS Score
5.0
EPSS Score
0.007
Published
2001-02-12
Vulnerability in auto_parms and set_parms in HP-UX 11.00 and earlier allows remote attackers to execute arbitrary commands or cause a denial of service.
CVSS Score
10.0
EPSS Score
0.008
Published
2001-01-09
registrar in the HP resource monitor service allows local users to read and modify arbitrary files by renaming the original registrar.log log file and creating a symbolic link to the target file, to which registrar appends log information and sets the permissions to be world readable.
CVSS Score
3.6
EPSS Score
0.005
Published
2001-01-09
Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka here-documents or in-here documents), which allows local users to overwrite files of other users via a symlink attack.
CVSS Score
7.2
EPSS Score
0.002
Published
2001-01-09
Buffer overflow in HP-UX cstm program allows local users to gain root privileges.
CVSS Score
7.2
EPSS Score
0.001
Published
2000-12-20