Vulnerabilities > HP > HP UX > 10.10

DATE CVE VULNERABILITY TITLE RISK
2002-07-23 CVE-2002-0678 Symbolic Link vulnerability in Multiple Vendor CDE ToolTalk Database Server
CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC procedure.
local
low complexity
caldera xi-graphics sgi compaq hp ibm sun
7.2
2002-07-23 CVE-2002-0677 CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument in an AUTH_UNIX procedure call, which is used as a table index by the _TT_ISCLOSE procedure.
network
low complexity
caldera xi-graphics sgi compaq hp ibm sun
7.5
2001-12-31 CVE-2001-1564 Unspecified vulnerability in HP Hp-Ux
setrlimit in HP-UX 10.01, 10.10, 10.24, 10.20, 11.00, 11.04 and 11.11 does not properly enforce core file size on processes after setuid or setgid privileges are dropped, which could allow local users to cause a denial of service by exhausting available disk space.
local
low complexity
hp
2.1
2001-12-15 CVE-2001-1198 Unspecified vulnerability in HP Hp-Ux
RLPDaemon in HP-UX 10.20 and 11.0 allows local users to overwrite arbitrary files and gain privileges by specifying the target file in the -L option.
local
low complexity
hp
7.2
2001-12-12 CVE-2001-0797 Buffer Overflow vulnerability in Multiple Vendor System V Derived 'login'
Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin.
network
low complexity
sgi hp ibm sco sun
critical
10.0
2001-12-06 CVE-2001-0817 Remote Line Printer Daemon Logic Flaw vulnerability in HP-UX
Vulnerability in HP-UX line printer daemon (rlpdaemon) in HP-UX 10.01 through 11.11 allows remote attackers to modify arbitrary files and gain root privileges via a certain print request.
network
low complexity
hp
critical
10.0
2001-10-18 CVE-2001-0772 Denial-Of-Service vulnerability in HP-UX
Buffer overflows and other vulnerabilities in multiple Common Desktop Environment (CDE) modules in HP-UX 10.10 through 11.11 allow attackers to cause a denial of service and possibly gain additional privileges.
local
low complexity
hp
4.6
2001-09-20 CVE-2001-0668 Buffer Overflow vulnerability in HP HP-UX Line Printer Daemon
Buffer overflow in line printer daemon (rlpdaemon) in HP-UX 10.01 through 11.11 allows remote attackers to execute arbitrary commands.
network
low complexity
hp
7.5
2001-09-03 CVE-2001-0979 Buffer Overflow vulnerability in HP HP-UX SWVerify
Buffer overflow in swverify in HP-UX 11.0, and possibly other programs, allows local users to gain privileges via a long command line argument.
local
low complexity
hp
7.2
2001-08-22 CVE-2001-0607 Denial-Of-Service vulnerability in HP-UX
asecure as included with HP-UX 10.01 through 11.00 can allow a local attacker to create a denial of service and gain additional privileges via unsafe permissions on the asecure program, a different vulnerability than CVE-2000-0083.
local
low complexity
hp
4.6