Every CVE whose affected-product data names Digital Unix, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (17)
CVE-1999-0073 — CVSS 10.0 (critical): Telnet allows a remote client to specify environment variables including LD_LIBRARY_PATH, allowing an attacker to bypass the normal system…
CVE-2001-0134 — CVSS 10.0 (critical): Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management software products such as Insight Manager and…
CVE-1999-0687 — CVSS 7.5 (high): The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands.
CVE-1999-0691 — CVSS 7.2 (high): Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name.
CVE-2001-0369 — CVSS 7.2 (high): Buffer overflow in lpsched on DGUX version R4.20MU06 and MU02 allows a local attacker to obtain root access via a long command line…
CVE-1999-0406 — CVSS 7.2 (high): Digital Unix Networker program nsralist has a buffer overflow which allows local users to obtain root privilege.
CVE-1999-1210 — CVSS 7.2 (high): xterm in Digital UNIX 4.0B *with* patch kit 5 allows local users to overwrite arbitrary files via a symlink attack on a core dump file…
CVE-1999-1458 — CVSS 7.2 (high): Buffer overflow in at program in Digital UNIX 4.0 allows local users to gain root privileges via a long command line argument.
CVE-2000-0845 — CVSS 6.4 (medium): kdebug daemon (kdebugd) in Digital Unix 4.0F allows remote attackers to read arbitrary files by specifying the full file name in the…
CVE-1999-0513 — CVSS 5.0 (medium): ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.
CVE-2000-0314 — CVSS 5.0 (medium): traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime (-w)…
CVE-2000-0315 — CVSS 5.0 (medium): traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be…
CVE-1999-1044 — CVSS 4.6 (medium): Vulnerability in Advanced File System Utility (advfs) in Digital UNIX 4.0 through 4.0d allows local users to gain privileges.
CVE-1999-1221 — CVSS 2.1 (low): dxchpwd in Digital Unix (OSF/1) 3.x allows local users to modify arbitrary files via a symlink attack on the dxchpwd.log file.