CVSS: 7.2EPSS: 0%CPEs: 1EXPL: 0CVE-1999-1139
https://notcve.org/view.php?id=CVE-1999-1139
Character-Terminal User Environment (CUE) in HP-UX 11.0 and earlier allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the IOERROR.mytty file. • http://marc.info/?l=bugtraq&m=87602880019745&w=2 http://security-archive.merton.ox.ac.uk/bugtraq-199801/0122.html http://www.ciac.org/ciac/bulletins/i-027b.shtml http://www.codetalker.com/advisories/vendor/hp/hpsbux9801-074.html http://www.iss.net/security_center/static/2007.php •
CVSS: 4.6EPSS: 0%CPEs: 1EXPL: 0CVE-1999-1308
https://notcve.org/view.php?id=CVE-1999-1308
Certain programs in HP-UX 10.20 do not properly handle large user IDs (UID) or group IDs (GID) over 60000, which could allow local users to gain privileges. • http://ciac.llnl.gov/ciac/bulletins/h-09.shtml http://ciac.llnl.gov/ciac/bulletins/h-91.shtml http://www.iss.net/security_center/static/7594.php •
CVSS: 7.2EPSS: 0%CPEs: 43EXPL: 5CVE-1999-0040 – LibXt - 'XtAppInitialize()' Local Overflow *xterm
https://notcve.org/view.php?id=CVE-1999-0040
Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges. • https://www.exploit-db.com/exploits/331 https://www.exploit-db.com/exploits/322 https://www.exploit-db.com/exploits/19200 https://www.exploit-db.com/exploits/19201 https://www.exploit-db.com/exploits/19202 https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0040 •
CVSS: 8.4EPSS: 0%CPEs: 45EXPL: 2CVE-1999-0038 – BSD/OS 2.1 / DG/UX 7.0 / Debian 1.3 / HP-UX 10.34 / IBM AIX 4.2 / SGI IRIX 6.4 / Solaris 2.5.1 - '/usr/bin/X11/xlock' Local Privilege Escalation
https://notcve.org/view.php?id=CVE-1999-0038
Buffer overflow in xlock program allows local users to execute commands as root. • https://www.exploit-db.com/exploits/19173 https://www.exploit-db.com/exploits/19172 https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0038 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 2.1EPSS: 0%CPEs: 9EXPL: 2CVE-1999-1408 – HP HP-UX 10.20 / IBM AIX 4.1.5 - 'connect()' Denial of Service
https://notcve.org/view.php?id=CVE-1999-1408
Vulnerability in AIX 4.1.4 and HP-UX 10.01 and 9.05 allows local users to cause a denial of service (crash) by using a socket to connect to a port on the localhost, calling shutdown to clear the socket, then using the same socket to connect to a different port on localhost. • https://www.exploit-db.com/exploits/19278 http://marc.info/?l=bugtraq&m=87602167420641&w=2 http://www.securityfocus.com/bid/352 •