9 results (0.003 seconds)

CVSS: 9.8EPSS: 7%CPEs: 15EXPL: 0

31 Dec 2004 — Stack-based buffer overflow in the FTP daemon in HP-UX 11.11i, with the -v (debug) option enabled, allows remote attackers to execute arbitrary code via a long command request. • http://marc.info/?l=bugtraq&m=110797179710695&w=2 •

CVSS: 10.0EPSS: 18%CPEs: 17EXPL: 0

23 Jun 2004 — Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length HTTP header field, which causes a large amount of data to be copied. Desbordamiento de búfer basado en el montón en proxy_util.c de mod_proxy en Apache 1.3.25 a 1.3.31 permite a atacantes remotos causar un denegación de servicio (caída del proceso) y posiblemente ejecutar código de su elecció... • ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc •

CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 2

18 Mar 2003 — Unknown vulnerability or vulnerabilities in HP OpenView EMANATE 14.2 snmpModules allow the SNMP read-write community name to be exposed, related to (1) "'read-only' community access," and/or (2) an easily guessable community name. Vulnerabilidad o vulnerabilidades desconocidas en módulos SNMP de HP OpenView EMANATE 14.2 SNMP permite que el nombre de comunidad de lectura y escritura quede expuesto, vulnerabilidad relacionada con "acceso de comunidad de sólo lectura" y/o "nombre de comunidad fácil de adivinar... • http://online.securityfocus.com/advisories/4360 •

CVSS: 9.8EPSS: 0%CPEs: 4EXPL: 0

18 Mar 2003 — Unknown vulnerability related to stack corruption in the TGA daemon for HP-UX 11.04 (VVOS) Virtualvault 4.0, 4.5, and 4.6 may allow attackers to obtain access to system files. Vulnerabilidad desconocida relacionada con la corrupción del stack en el demonio TGA para HP-UX 11.04 (WOS) Virtualvault 4.0, 4.5, y 4.6 permite que atacantes tengan acceso al sistema de ficheros. • http://archives.neohapsis.com/archives/hp/2002-q3/0050.html •

CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0

31 Dec 2002 — HTTP Server mod_ssl module running on HP-UX 11.04 with Virtualvault OS (VVOS) 4.5 through 4.6 closes the connection when the Apache server times out during an SSL request, which may allow attackers to cause a denial of service. • http://online.securityfocus.com/advisories/4502 •

CVSS: 10.0EPSS: 0%CPEs: 3EXPL: 1

19 Jul 2001 — Vulnerability in mkacct in HP-UX 11.04 running Virtualvault Operating System (VVOS) 4.0 and 4.5 allows attackers to elevate privileges. • http://ciac.llnl.gov/ciac/bulletins/l-119.shtml •

CVSS: 7.5EPSS: 10%CPEs: 29EXPL: 2

07 Jul 2001 — Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small number and requesting large amounts of data, which generates more packets with less TCP-level data that amplify network traffic and consume more server CPU to process. • https://www.exploit-db.com/exploits/20997 •

CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0

19 Dec 2000 — The NSAPI plugins for TGA and the Java Servlet proxy in HP-UX VVOS 10.24 and 11.04 allows an attacker to cause a denial of service (high CPU utilization). • http://archives.neohapsis.com/archives/hp/2000-q4/0012.html •

CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 0

04 May 2000 — Vulnerability in shutdown command for HP-UX 11.X and 10.X allows allows local users to gain privileges via malformed input variables. • http://archives.neohapsis.com/archives/bugtraq/2000-05/0047.html •