tru64 vulnerabilities and fixes

Recent CVEs affecting tru64, with upgrade or downgrade steps. 53 tracked.

tru64 has 53 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2008-11-07. Highest priority: CVE-2003-0201 (score 65/100).

• CVE-2008-4414 HIGH 7.2 MITIGATE Unspecified vulnerability in the AdvFS showfile command in HP Tru64 UNIX 5.1B-3 and 5.1B-4 allows local users
• CVE-2007-6519 MEDIUM 4.9 MITIGATE Unspecified vulnerability in the File-on-File Mounting File System (FFM) in HP Tru64 UNIX 5.1B-4 and 5.1B-3 al
• CVE-2007-2791 HIGH 10.0 MITIGATE Unspecified vulnerability in the Secure Shell (SSH) in HP Tru64 UNIX 5.1B-4 and 5.1B-3 allows remote attackers
• CVE-2007-2553 HIGH 7.2 MITIGATE Unspecified vulnerability in dop in HP Tru64 UNIX 5.1B-4, 5.1B-3, and 5.1A PK6 allows local users to gain priv
• CVE-2007-0805 LOW 2.1 MITIGATE The ps (/usr/ucb/ps) command on HP Tru64 UNIX 5.1 1885 allows local users to obtain sensitive information, inc
• CVE-2006-6418 HIGH 7.2 MITIGATE Buffer overflow in the POSIX Threads library (libpthread) on HP Tru64 UNIX 4.0F PK8, 4.0G PK4, and 5.1A PK6 al
• CVE-2006-5452 MEDIUM 4.6 MITIGATE MITIGATE Buffer overflow in dtmail on HP Tru64 UNIX 4.0F through 5.1B and HP-UX B.11.00 through B.11.23 allows local us
• CVE-2005-3670 HIGH 7.8 MITIGATE MITIGATE Multiple unspecified vulnerabilities in the Internet Key Exchange version 1 (IKEv1) implementation in HP HP-UX
• CVE-2005-2993 LOW 1.7 MITIGATE UPGRADE Unspecified vulnerability in the FTP Daemon (ftpd) for HP Tru64 UNIX 4.0F PK8 and other versions up to HP Tru6
• CVE-2005-0719 LOW 2.1 MITIGATE Unknown vulnerability in the systems message queue in HP Tru64 Unix 4.0F PK8 through 5.1B-2/PK4 allows local u
• CVE-2005-0223 MEDIUM 5.0 DOWNGRADE DOWNGRADE The Software Development Kit (SDK) and Run Time Environment (RTE) 1.4.1 and 1.4.2 for Tru64 UNIX allows remote
• CVE-2004-2678 MEDIUM 5.1 MITIGATE Unspecified vulnerability in HP Tru64 UNIX 5.1B PK2(BL22) and PK3(BL24), and 5.1A PK6(BL24), when using IPsec/
• CVE-2003-1496 HIGH 10.0 MITIGATE Unspecified vulnerability in CDE dtmailpr of HP Tru64 4.0F through 5.1B allows local users to gain privileges
• CVE-2003-0914 MEDIUM 4.3 DOWNGRADE DOWNGRADE ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicio
• CVE-2003-0724 HIGH 7.5 MITIGATE ssh on HP Tru64 UNIX 5.1B and 5.1A does not properly handle RSA signatures when digital certificates and RSA k
• CVE-2003-0688 MEDIUM 5.0 DOWNGRADE DOWNGRADE The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initiali
• CVE-2003-0221 HIGH 7.2 UPGRADE The (1) dupatch and (2) setld utilities in HP Tru64 UNIX 5.1B PK1 and earlier allows local users to overwrite
• CVE-2003-0201 HIGH 10.0 DOWNGRADE DOWNGRADE Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier
• CVE-2003-0196 HIGH 10.0 DOWNGRADE DOWNGRADE Multiple buffer overflows in Samba before 2.2.8a may allow remote attackers to execute arbitrary code or cause
• CVE-2003-0161 HIGH 10.0 DOWNGRADE DOWNGRADE The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle
• CVE-2002-2071 MEDIUM 5.0 MITIGATE Compaq Tru64 4.0 d allows remote attackers to cause a denial of service in (1) telnet, (2) FTP, (3) ypbind, (4
• CVE-2002-2004 MEDIUM 5.0 MITIGATE portmapper in Compaq Tru64 4.0G and 5.0A allows remote attackers to cause a denial of service via a flood of p
• CVE-2002-2003 MEDIUM 5.0 MITIGATE ypbind in Compaq Tru64 4.0F, 4.0G, 5.0A, 5.1 and 5.1A allows remote attackers to cause the process to core dum
• CVE-2002-2002 HIGH 7.5 MITIGATE Buffer overflow in libc in Compaq Tru64 4.0F, 5.0, 5.1 and 5.1A allows attackers to execute arbitrary code via
• CVE-2002-1784 MEDIUM 5.0 MITIGATE Unknown vulnerability in inetd in HP Tru64 Unix 4.0f through 5.1a allows remote attackers to cause a denial of
• CVE-2002-1617 HIGH 7.2 MITIGATE Multiple buffer overflows in HP Tru64 UNIX 5.x allow local users to execute arbitrary code via (1) a long -con
• CVE-2002-1616 HIGH 7.2 MITIGATE Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain root priv
• CVE-2002-1615 HIGH 7.2 MITIGATE MITIGATE Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to execute arbitr
• CVE-2002-1614 HIGH 7.2 MITIGATE MITIGATE Buffer overflow in HP Tru64 UNIX allows local users to execute arbitrary code via a long argument to /usr/bin/
• CVE-2002-1613 HIGH 7.2 MITIGATE MITIGATE Buffer overflow in ps in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.
• CVE-2002-1612 HIGH 7.2 MITIGATE MITIGATE Buffer overflow in mailcv in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileg
• CVE-2002-1611 MEDIUM 4.6 MITIGATE MITIGATE Buffer overflow in quot in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges
• CVE-2002-1610 LOW 2.1 MITIGATE MITIGATE Unknown vulnerability in ping in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to cause a d
• CVE-2002-1609 MEDIUM 4.6 MITIGATE MITIGATE Buffer overflow in binmail in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privile
• CVE-2002-1608 MEDIUM 4.6 MITIGATE MITIGATE Buffer overflow in traceroute in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute a
• CVE-2002-1607 MEDIUM 4.6 MITIGATE MITIGATE Buffer overflow in ypmatch in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbi
• CVE-2002-1606 MEDIUM 4.6 MITIGATE MITIGATE Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain privilege
• CVE-2002-1605 HIGH 7.5 MITIGATE MITIGATE Buffer overflow in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code vi
• CVE-2002-1604 HIGH 7.5 MITIGATE MITIGATE Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code
• CVE-2002-1475 MEDIUM 5.0 MITIGATE Unknown vulnerability in the ARP component for HP Tru64 UNIX 4.0f, 4.0g, and 5.0a allows remote attackers to "
• CVE-2002-1474 MEDIUM 5.0 MITIGATE Unknown vulnerability or vulnerabilities in TCP/IP component for HP Tru64 UNIX 4.0f, 4.0g, and 5.0a allows rem
• CVE-2002-1202 HIGH 7.5 MITIGATE Unknown vulnerability in routed for HP Tru64 UNIX V4.0F through V5.1A allows local and remote attackers to rea
• CVE-2002-1129 HIGH 7.2 MITIGATE MITIGATE Buffer overflow in dxterm allows local users to execute arbitrary code via a long -xrm argument.
• CVE-2002-0816 HIGH 7.2 MITIGATE Buffer overflow in su in Tru64 Unix 5.x allows local users to gain root privileges via a long username and arg
• CVE-2002-0679 HIGH 10.0 DOWNGRADE DOWNGRADE Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remo
• CVE-2002-0678 HIGH 7.2 DOWNGRADE DOWNGRADE CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack
• CVE-2002-0677 HIGH 7.5 DOWNGRADE DOWNGRADE CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with
• CVE-2002-0093 HIGH 7.2 MITIGATE Buffer overflow in ipcs for HP Tru64 UNIX 4.0f through 5.1a may allow attackers to execute arbitrary code, a d
• CVE-2001-1435 MEDIUM 5.0 MITIGATE inetd in Compaq Tru64 UNIX 5.1 allows attackers to cause a denial of service (network connection loss) by caus
• CVE-2001-1093 HIGH 7.2 MITIGATE Buffer overflow in msgchk in Digital UNIX 4.0G and earlier allows local users to execute arbitrary code via a
• CVE-2001-1092 LOW 2.1 MITIGATE msgchk in Digital UNIX 4.0G and earlier allows a local user to read the first line of arbitrary files via a sy
• CVE-2001-1033 MEDIUM 5.0 DOWNGRADE MITIGATE Compaq TruCluster 1.5 allows remote attackers to cause a denial of service via a port scan from a system that
• CVE-2000-1031 MEDIUM 4.6 MITIGATE MITIGATE Buffer overflow in dtterm in HP-UX 11.0 and HP Tru64 UNIX 4.0f through 5.1a allows local users to execute arbi

FAQ

How do I fix tru64 vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is tru64 being exploited right now?

None of the tracked tru64 CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which tru64 CVE should I patch first?

CVE-2003-0201 currently ranks highest (65/100): Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier .

RSS feed for tru64 · ← Back to latest CVEs