Priority HIGH 68
Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length H…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.33639 · Published 2004-06-23 · Fixed
Priority MEDIUM 50
Vulnerability in mkacct in HP-UX 11.04 running Virtualvault Operating System (VVOS) 4.0 and 4.5 allows attackers to elevate privileges.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.03948 · Published 2002-05-03 · No fix listed
Priority MEDIUM 49
HP VirtualVault with the PHSS_17692 patch allows unprivileged processes to bypass access restrictions via the Trusted Gateway Proxy (TGP).
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.03304 · Published 2000-01-18 · No fix listed
Priority MEDIUM 45
Stack-based buffer overflow in the FTP daemon in HP-UX 11.11i, with the -v (debug) option enabled, allows remote attackers to execute arbitrary code via a long command request.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.09543 · Published 2005-01-06 · No fix listed
Priority MEDIUM 44
Vacation program allows command execution by remote users through a sendmail command.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.08186 · Published 1999-09-29 · No fix listed
Priority MEDIUM 42
Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small number and requesting large amounts of data,…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.21965 · Published 2002-05-03 · No fix listed
Priority LOW 37
Unknown vulnerability or vulnerabilities in HP OpenView EMANATE 14.2 snmpModules allow the SNMP read-write community name to be exposed, related to (1) "'read-only' community access," and/or (2) an easily guessable commu…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02142 · Published 2003-03-18 · No fix listed
Priority LOW 35
buffer overflow in HP xlock program.
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.01672 · Published 2000-02-04 · No fix listed
Priority LOW 34
Unauthorized privileged access or denial of service via dtappgather program in CDE.
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.01223 · Published 1999-09-29 · No fix listed
Priority LOW 28
The NSAPI plugins for TGA and the Java Servlet proxy in HP-UX VVOS 10.24 and 11.04 allows an attacker to cause a denial of service (high CPU utilization).
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02523 · Published 2001-01-22 · No fix listed
Priority LOW 27
HTTP Server mod_ssl module running on HP-UX 11.04 with Virtualvault OS (VVOS) 4.5 through 4.6 closes the connection when the Apache server times out during an SSL request, which may allow attackers to cause a denial of s…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02206 · Published 2005-06-28 · No fix listed
Priority LOW 26
HP-UX 11.04 VirtualVault (VVOS) sends data to unprivileged processes via an interface that has multiple aliased IP addresses.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01642 · Published 2000-07-12 · No fix listed
Priority LOW 22
Unknown vulnerability related to stack corruption in the TGA daemon for HP-UX 11.04 (VVOS) Virtualvault 4.0, 4.5, and 4.6 may allow attackers to obtain access to system files.
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.00582 · Published 2003-03-18 · No fix listed
Priority LOW 22
Vulnerability in shutdown command for HP-UX 11.X and 10.X allows allows local users to gain privileges via malformed input variables.
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.00483 · Published 2000-07-12 · No fix listed