Digital Unix vulnerabilities
15 vulnerabilities
Known vulnerabilities in Digital Unix, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2001-0134compaqarmada_insight_manager+14
EPSS score4.01%
Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management software products such as Insight Manager and Management Agents allows remote attackers to execute arbitrary commands via a long user name.CVE-2001-0369digitalunixEPSS score0.71%
Buffer overflow in lpsched on DGUX version R4.20MU06 and MU02 allows a local attacker to obtain root access via a long command line argument (non-existent printer name).CVE-2000-0315debiandebian_linux+4EPSS score1.75%
traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be used in spoofing attacks.CVE-2000-0314debiandebian_linux+4EPSS score1.75%
traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime (-w) option, which is not parsed properly and sets the time delay for sending packets to zero.CVE-2000-0845digitalunixEPSS score1.32%
kdebug daemon (kdebugd) in Digital Unix 4.0F allows remote attackers to read arbitrary files by specifying the full file name in the initialization packet.CVE-1999-1044digitalunixEPSS score0.31%
Vulnerability in Advanced File System Utility (advfs) in Digital UNIX 4.0 through 4.0d allows local users to gain privileges.CVE-1999-1458digitalunixEPSS score0.54%
Buffer overflow in at program in Digital UNIX 4.0 allows local users to gain root privileges via a long command line argument.CVE-1999-1221digitalunixEPSS score0.61%
dxchpwd in Digital Unix (OSF/1) 3.x allows local users to modify arbitrary files via a symlink attack on the dxchpwd.log file.CVE-1999-1210digitalunixEPSS score0.33%
xterm in Digital UNIX 4.0B *with* patch kit 5 allows local users to overwrite arbitrary files via a symlink attack on a core dump file, which is created when xterm is called with a DISPLAY environmental variable set to a display that xterm cannot access.CVE-1999-0687cdecde+4EPSS score2.22%
The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands.CVE-1999-0714digitalunixEPSS score0.40%
Vulnerability in Compaq Tru64 UNIX edauth command.CVE-1999-0513digitalunix+7EPSS score70.93%
ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.CVE-1999-0073digitalosf_1+2EPSS score3.09%
Telnet allows a remote client to specify environment variables including LD_LIBRARY_PATH, allowing an attacker to bypass the normal system libraries and gain root access.CVE-1999-0691cdecde+4EPSS score0.84%
Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name.CVE-1999-0358digitalunixEPSS score0.38%
Digital Unix 4.0 has a buffer overflow in the inc program of the mh package.