HP HP-Ux Series 800 vulnerabilities

4 CVEs affecting HP HP-Ux Series 800, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2004-1332, published 2004-12-31.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2003-0161, published 2003-04-02. High severity, CVSS 10.0. EPSS: 38.8% chance of exploitation in the next 30 days. The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be…
CVE-2003-0028, published 2003-03-25. High severity, CVSS 7.5. EPSS: 15% chance of exploitation in the next 30 days. Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc,…
CVE-2004-1332, published 2004-12-31. High severity, CVSS 7.5. EPSS: 9.5% chance of exploitation in the next 30 days. Stack-based buffer overflow in the FTP daemon in HP-UX 11.11i, with the -v (debug) option enabled, allows remote attackers to execute arbitrary code via a long command request.
CVE-2002-1668, published 2002-12-31. Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days. HP-UX 11.11 and earlier allows local users to cause a denial of service (kernel deadlock), due to a "file system weakness" that is possibly via an mmap() system call and performing an I/O operation…