Nec Asl Ux 4800 vulnerabilities

8 CVEs affecting Nec Asl Ux 4800, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-1999-0011, published 1998-04-08.

More from Nec.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-1999-0009, published 1998-04-08. High severity, CVSS 10.0. EPSS: 29% chance of exploitation in the next 30 days. Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.
• CVE-1999-0208, published 1995-12-12. High severity, CVSS 10.0. EPSS: 12.9% chance of exploitation in the next 30 days. rpc.ypupdated (NIS) allows remote users to execute arbitrary commands.
• CVE-1999-0011, published 1998-04-08. Medium severity, CVSS 5.4. EPSS: 5.5% chance of exploitation in the next 30 days. Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer.
• CVE-1999-0024, published 1997-08-13. Medium severity, CVSS 5.0. EPSS: 5% chance of exploitation in the next 30 days. DNS cache poisoning via BIND, by predictable query IDs.
• CVE-1999-0048, published 1997-01-27. High severity, CVSS 10.0. EPSS: 3.1% chance of exploitation in the next 30 days. Talkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges.
• CVE-1999-0010, published 1998-04-08. Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days. Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages.
• CVE-1999-0040, published 1997-05-01. High severity, CVSS 7.2. EPSS: 1.2% chance of exploitation in the next 30 days. Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.
• CVE-1999-0138, published 1996-06-26. High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days. The suidperl and sperl program do not give up root privileges when changing UIDs back to the original users, allowing root access.