Digital Osf 1 — known CVE vulnerabilities

Every CVE whose affected-product data names Digital Osf 1, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-1999-0073 — CVSS 10.0 (critical): Telnet allows a remote client to specify environment variables including LD_LIBRARY_PATH, allowing an attacker to bypass the normal system…
• CVE-1999-0131 — CVSS 7.2 (high): Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users.
• CVE-1999-0138 — CVSS 7.2 (high): The suidperl and sperl program do not give up root privileges when changing UIDs back to the original users, allowing root access.
• CVE-2002-1129 — CVSS 7.2 (high): Buffer overflow in dxterm allows local users to execute arbitrary code via a long -xrm argument.
• CVE-2002-1127 — CVSS 7.2 (high): Buffer overflow in uucp in Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long source (-s) command line parameter.
• CVE-2002-1128 — CVSS 7.2 (high): Buffer overflow in inc mail utility for Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long MH environment…
• CVE-1999-0128 — CVSS 5.0 (medium): Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.
• CVE-1999-0303 — CVSS 4.6 (medium): Buffer overflow in BNU UUCP daemon (uucpd) through long hostnames.
• CVE-1999-1103 — CVSS 4.6 (medium): dxconsole in DEC OSF/1 3.2C and earlier allows local users to read arbitrary files by specifying the file with the -file parameter.