compaq vulnerabilities

Recent CVEs affecting compaq products. 40 tracked.

compaq has 40 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2008-03-31. Highest priority: CVE-2000-1209 (score 70/100).

CVE-2000-0946 MEDIUM 4.6 DOWNGRADE Compaq Easy Access Keyboard software 1.3 does not properly disable access to custom buttons when the screen is
CVE-2008-0706 HIGH 7.2 MITIGATE MITIGATE Unspecified vulnerability in the BIOS F.26 and earlier for the HP Compaq Notebook PC allows physically proxima
CVE-2008-0211 MEDIUM 4.9 UPGRADE UPGRADE Unspecified vulnerability in the BIOS F.04 through F.11 for the HP Compaq Business Notebook PC allows local us
CVE-2005-2982 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in CompaqHTTPServer 2.1 allows remote attackers to inject arbitrary w
CVE-2005-0223 MEDIUM 5.0 DOWNGRADE DOWNGRADE The Software Development Kit (SDK) and Run Time Environment (RTE) 1.4.1 and 1.4.2 for Tru64 UNIX allows remote
CVE-2003-0914 MEDIUM 4.3 DOWNGRADE DOWNGRADE ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicio
CVE-2003-0724 HIGH 7.5 MITIGATE ssh on HP Tru64 UNIX 5.1B and 5.1A does not properly handle RSA signatures when digital certificates and RSA k
CVE-2003-0688 MEDIUM 5.0 DOWNGRADE DOWNGRADE The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initiali
CVE-2003-0201 HIGH 10.0 DOWNGRADE DOWNGRADE Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier
CVE-2003-0196 HIGH 10.0 DOWNGRADE DOWNGRADE Multiple buffer overflows in Samba before 2.2.8a may allow remote attackers to execute arbitrary code or cause
CVE-2003-0161 HIGH 10.0 DOWNGRADE DOWNGRADE The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle
CVE-2002-2422 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in Compaq Insight Management Agents 2.0, 2.1, 3.6.0, 4.2 and 4.3.7 al
CVE-2002-2071 MEDIUM 5.0 MITIGATE Compaq Tru64 4.0 d allows remote attackers to cause a denial of service in (1) telnet, (2) FTP, (3) ypbind, (4
CVE-2002-2004 MEDIUM 5.0 MITIGATE portmapper in Compaq Tru64 4.0G and 5.0A allows remote attackers to cause a denial of service via a flood of p
CVE-2002-2003 MEDIUM 5.0 MITIGATE ypbind in Compaq Tru64 4.0F, 4.0G, 5.0A, 5.1 and 5.1A allows remote attackers to cause the process to core dum
CVE-2002-2002 HIGH 7.5 MITIGATE Buffer overflow in libc in Compaq Tru64 4.0F, 5.0, 5.1 and 5.1A allows attackers to execute arbitrary code via
CVE-2002-2000 LOW 2.1 DOWNGRADE ACMS 4.3 and 4.4 in OpenVMS Alpha 7.2 and 7.3 does not properly use process privileges, which allows attackers
CVE-2002-1513 MEDIUM 4.6 MITIGATE The UCX POP server in HP TCP/IP services for OpenVMS 4.2 through 5.3 allows local users to truncate arbitrary
CVE-2002-1202 HIGH 7.5 MITIGATE Unknown vulnerability in routed for HP Tru64 UNIX V4.0F through V5.1A allows local and remote attackers to rea
CVE-2002-1129 HIGH 7.2 MITIGATE MITIGATE Buffer overflow in dxterm allows local users to execute arbitrary code via a long -xrm argument.
CVE-2002-0883 HIGH 7.2 MITIGATE Vulnerability in Compaq ProLiant BL e-Class Integrated Administrator 1.0 and 1.10, allows authenticated users
CVE-2002-0816 HIGH 7.2 MITIGATE Buffer overflow in su in Tru64 Unix 5.x allows local users to gain root privileges via a long username and arg
CVE-2002-0679 HIGH 10.0 DOWNGRADE DOWNGRADE Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remo
CVE-2002-0678 HIGH 7.2 DOWNGRADE DOWNGRADE CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack
CVE-2002-0677 HIGH 7.5 DOWNGRADE DOWNGRADE CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with
CVE-2002-0093 HIGH 7.2 MITIGATE Buffer overflow in ipcs for HP Tru64 UNIX 4.0f through 5.1a may allow attackers to execute arbitrary code, a d
CVE-2001-1435 MEDIUM 5.0 MITIGATE inetd in Compaq Tru64 UNIX 5.1 allows attackers to cause a denial of service (network connection loss) by caus
CVE-2001-1093 HIGH 7.2 MITIGATE Buffer overflow in msgchk in Digital UNIX 4.0G and earlier allows local users to execute arbitrary code via a
CVE-2001-1092 LOW 2.1 MITIGATE msgchk in Digital UNIX 4.0G and earlier allows a local user to read the first line of arbitrary files via a sy
CVE-2001-1033 MEDIUM 5.0 DOWNGRADE MITIGATE Compaq TruCluster 1.5 allows remote attackers to cause a denial of service via a port scan from a system that
CVE-2001-0840 HIGH 10.0 DOWNGRADE Buffer overflow in Compaq Insight Manager XE 2.1b and earlier allows remote attackers to execute arbitrary cod
CVE-2001-0728 MEDIUM 4.6 UPGRADE Buffer overflow in Compaq Management Agents before 5.2, included in Compaq Web-enabled Management Software, al
CVE-2001-0434 MEDIUM 6.4 MITIGATE The LogDataListToFile ActiveX function used in (1) Knowledge Center and (2) Back web components of Compaq Pres
CVE-2001-0374 HIGH 7.5 MITIGATE The HTTP server in Compaq web-enabled management software for (1) Foundation Agents, (2) Survey, (3) Power Man
CVE-2001-0134 HIGH 10.0 DOWNGRADE DOWNGRADE Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management software products such as
CVE-2000-1209 HIGH 10.0 DOWNGRADE DOWNGRADE The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.
CVE-1999-1356 MEDIUM 4.6 UPGRADE Compaq Integration Maintenance Utility as used in Compaq Insight Manager agent before SmartStart 4.50 modifies
CVE-1999-1355 HIGH 7.5 UPGRADE UPGRADE BMC Patrol component, when installed with Compaq Insight Management Agent 4.23 and earlier, or Management Agen
CVE-1999-0772 MEDIUM 6.4 MITIGATE DOWNGRADE Denial of service in Compaq Management Agents and the Compaq Survey Utility via a long string sent to port 230
CVE-1999-0771 MEDIUM 5.0 MITIGATE DOWNGRADE The web components of Compaq Management Agents and the Compaq Survey Utility allow a remote attacker to read a

FAQ

How do I fix compaq vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is compaq being exploited right now?

None of the tracked compaq CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which compaq CVE should I patch first?

CVE-2000-1209 currently ranks highest (70/100): The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7..

Products

RSS feed for compaq · ← Back to latest CVEs