Compaq vulnerabilities

38 vulnerabilities

Known vulnerabilities in Compaq products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 43 products.

Products

43
10CVE-2003-0201applemac_os_x+8
EPSS score
84.62%
Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code.
10CVE-2003-0694applemac_os_x+18
EPSS score
66.18%
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.
10CVE-2003-0196compaqtru64+7
EPSS score
22.76%
Multiple buffer overflows in Samba before 2.2.8a may allow remote attackers to execute arbitrary code or cause a denial of service, as discovered by the Samba team and a different vulnerability than CVE-2003-0201.
5CVE-2003-0688compaqtru64+6
EPSS score
3.56%
The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initialize certain data structures, which allows remote attackers to cause a denial of service (process crash) via an invalid DNS response that causes Sendmail to free incorrect data.
10CVE-2003-0161compaqtru64+9
EPSS score
38.79%
The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers to cause a denial of service and possibly execute arbitrary code via a buffer overflow attack using messages, a different vulnerability than CVE-2002-1337.
4.3CVE-2003-0914compaqtru64+10
EPSS score
3.78%
ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value.
7.5CVE-2003-0724compaqtru64
EPSS score
0.85%
ssh on HP Tru64 UNIX 5.1B and 5.1A does not properly handle RSA signatures when digital certificates and RSA keys are used, which could allow local and remote attackers to gain privileges.
5CVE-2001-1033compaqtru64+1
EPSS score
1.61%
Compaq TruCluster 1.5 allows remote attackers to cause a denial of service via a port scan from a system that does not have a DNS PTR record, which causes the cluster to enter a "split-brain" state.
2.1CVE-2001-1092compaqtru64
EPSS score
1.11%
msgchk in Digital UNIX 4.0G and earlier allows a local user to read the first line of arbitrary files via a symlink attack on the .mh_profile file.
5CVE-2001-1435compaqtru64
EPSS score
1.63%
inetd in Compaq Tru64 UNIX 5.1 allows attackers to cause a denial of service (network connection loss) by causing one of the services handled by inetd to core dump during startup, which causes inetd to stop accepting connections to all of its services.
7.2CVE-2001-1093compaqtru64
EPSS score
1.31%
Buffer overflow in msgchk in Digital UNIX 4.0G and earlier allows local users to execute arbitrary code via a long command line argument.
10CVE-2001-0840compaqinsight_manager_xe
EPSS score
8.96%
Buffer overflow in Compaq Insight Manager XE 2.1b and earlier allows remote attackers to execute arbitrary code via (1) SNMP and (2) DMI.
10CVE-2001-0134compaqarmada_insight_manager+14
EPSS score
4.01%
Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management software products such as Insight Manager and Management Agents allows remote attackers to execute arbitrary commands via a long user name.
4.6CVE-2001-0728compaqmanagement_agents
EPSS score
0.40%
Buffer overflow in Compaq Management Agents before 5.2, included in Compaq Web-enabled Management Software, allows local users to gain privileges.
4.3CVE-2005-2982compaqcompaqhttpserver
EPSS score
0.97%
Cross-site scripting (XSS) vulnerability in CompaqHTTPServer 2.1 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly quoted in the resulting 404 error page.
4.9CVE-2008-0211compaq2210_series_bios+12
EPSS score
0.32%
Unspecified vulnerability in the BIOS F.04 through F.11 for the HP Compaq Business Notebook PC allows local users to cause a denial of service via unspecified vectors.
10CVE-2000-1209compaqinsight_manager+3
EPSS score
87.31%
The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6) Visio 2000, which allows remote attackers to gain privileges, as exploited by worms such as Voyager Alpha Force and Spida.
4.6CVE-2000-0946compaqeasy_access_keyboard_software
EPSS score
0.36%
Compaq Easy Access Keyboard software 1.3 does not properly disable access to custom buttons when the screen is locked, which could allow an attacker to gain privileges or execute programs without authorization.
7.5CVE-1999-1152compaqmicrocom_6000_firmware
EPSS score
1.57%
Compaq/Microcom 6000 Access Integrator does not disconnect a client after a certain number of failed login attempts, which allows remote attackers to guess usernames or passwords via a brute force attack.
7.5CVE-1999-1355compaqinsight_management_agent+1
EPSS score
1.50%
BMC Patrol component, when installed with Compaq Insight Management Agent 4.23 and earlier, or Management Agents for Servers 4.40 and earlier, creates a PFCUser account with a default password and potentially dangerous privileges.