Digital Ultrix — known CVE vulnerabilities

Every CVE whose affected-product data names Digital Ultrix, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-1999-0046 — CVSS 10.0 (critical): Buffer overflow of rlogin program using TERM environmental variable.
• CVE-1999-1032 — CVSS 10.0 (critical): Vulnerability in LAT/Telnet Gateway (lattelnet) on Ultrix 4.1 and 4.2 allows attackers to gain root privileges.
• CVE-1999-0170 — CVSS 7.5 (high): Remote attackers can mount an NFS file system in Ultrix or OSF, even if it is denied on the access list.
• CVE-1999-1194 — CVSS 7.2 (high): chroot in Digital Ultrix 4.1 and 4.0 is insecurely installed, which allows local users to gain privileges.
• CVE-2002-1128 — CVSS 7.2 (high): Buffer overflow in inc mail utility for Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long MH environment…
• CVE-1999-1225 — CVSS 5.0 (medium): rpc.mountd on Linux, Ultrix, and possibly other operating systems, allows remote attackers to determine the existence of a file on the…
• CVE-1999-1415 — CVSS 4.6 (medium): Vulnerability in /usr/bin/mail in DEC ULTRIX before 4.2 allows local users to gain privileges.