HP Secure OS vulnerabilities

6 CVEs affecting HP Secure OS, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2002-1232, published 2002-11-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2002-0836, published 2002-10-28. High severity, CVSS 7.5. EPSS: 8% chance of exploitation in the next 30 days. dvips converter for Postscript files in the tetex package calls the system() function insecurely, which allows remote attackers to execute arbitrary commands via certain print jobs, possibly…
CVE-2002-0835, published 2002-10-04. Medium severity, CVSS 5.0. EPSS: 6.9% chance of exploitation in the next 30 days. Preboot eXecution Environment (PXE) server allows remote attackers to cause a denial of service (crash) via certain DHCP packets from Voice-Over-IP (VOIP) phones.
CVE-2001-1563, published 2001-12-31. High severity, CVSS 7.5. EPSS: 4.9% chance of exploitation in the next 30 days. Unknown vulnerability in Tomcat 3.2.1 running on HP Secure OS for Linux 1.0 allows attackers to access servlet resources. NOTE: due to the vagueness of the vendor advisory, it is not clear whether…
CVE-2002-1232, published 2002-11-04. Medium severity, CVSS 5.0. EPSS: 3.3% chance of exploitation in the next 30 days. Memory leak in ypdb_open in yp_db.c for ypserv before 2.5 in the NIS package 3.9 and earlier allows remote attackers to cause a denial of service (memory consumption) via a large number of requests…
CVE-2001-1506, published 2001-12-31. Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days. Unknown vulnerability in the file system protection subsystem in HP Secure OS Software for Linux 1.0 allows additional user privileges on some files beyond what is specified in the file system…
CVE-2002-0638, published 2002-08-12. Medium severity, CVSS 6.2. EPSS: 0.5% chance of exploitation in the next 30 days. setpwnam.c in the util-linux package, as included in Red Hat Linux 7.3 and earlier, and other operating systems, does not properly lock a temporary file when modifying /etc/passwd, which may allow…