HP Vvos vulnerabilities

14 CVEs affecting HP Vvos, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2004-1332, published 2004-12-31.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2004-0492, published 2004-08-06. High severity, CVSS 10.0. EPSS: 33.6% chance of exploitation in the next 30 days. Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a…
CVE-2001-1244, published 2001-07-07. Medium severity, CVSS 5.0. EPSS: 22% chance of exploitation in the next 30 days. Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small number and requesting…
CVE-2004-1332, published 2004-12-31. High severity, CVSS 7.5. EPSS: 9.5% chance of exploitation in the next 30 days. Stack-based buffer overflow in the FTP daemon in HP-UX 11.11i, with the -v (debug) option enabled, allows remote attackers to execute arbitrary code via a long command request.
CVE-1999-0057, published 1998-11-16. High severity, CVSS 7.5. EPSS: 8.2% chance of exploitation in the next 30 days. Vacation program allows command execution by remote users through a sendmail command.
CVE-2001-1264, published 2001-07-19. High severity, CVSS 10.0. EPSS: 3.9% chance of exploitation in the next 30 days. Vulnerability in mkacct in HP-UX 11.04 running Virtualvault Operating System (VVOS) 4.0 and 4.5 allows attackers to elevate privileges.
CVE-1999-0992, published 2000-01-18. High severity, CVSS 10.0. EPSS: 3.3% chance of exploitation in the next 30 days. HP VirtualVault with the PHSS_17692 patch allows unprivileged processes to bypass access restrictions via the Trusted Gateway Proxy (TGP).
CVE-2000-0965, published 2000-12-19. Medium severity, CVSS 5.0. EPSS: 2.5% chance of exploitation in the next 30 days. The NSAPI plugins for TGA and the Java Servlet proxy in HP-UX VVOS 10.24 and 11.04 allows an attacker to cause a denial of service (high CPU utilization).
CVE-2002-1793, published 2002-12-31. Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days. HTTP Server mod_ssl module running on HP-UX 11.04 with Virtualvault OS (VVOS) 4.5 through 4.6 closes the connection when the Apache server times out during an SSL request, which may allow attackers…
CVE-2002-1408, published 2003-04-11. High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days. Unknown vulnerability or vulnerabilities in HP OpenView EMANATE 14.2 snmpModules allow the SNMP read-write community name to be exposed, related to (1) "'read-only' community access," and/or (2) an…
CVE-1999-0306, published 1997-11-04. High severity, CVSS 7.2. EPSS: 1.7% chance of exploitation in the next 30 days. buffer overflow in HP xlock program.

Latest

CVE-2002-1439, published 2003-04-11. Medium severity, CVSS 4.6. EPSS: 0.6% chance of exploitation in the next 30 days. Unknown vulnerability related to stack corruption in the TGA daemon for HP-UX 11.04 (VVOS) Virtualvault 4.0, 4.5, and 4.6 may allow attackers to obtain access to system files.
CVE-2000-0414, published 2000-05-04. Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in shutdown command for HP-UX 11.X and 10.X allows allows local users to gain privileges via malformed input variables.
CVE-2000-0251, published 2000-04-06. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. HP-UX 11.04 VirtualVault (VVOS) sends data to unprivileged processes via an interface that has multiple aliased IP addresses.