Nec Up-ux V — known CVE vulnerabilities

Every CVE whose affected-product data names Nec Up-ux V, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-1999-0048 — CVSS 10.0 (critical): Talkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges.
• CVE-1999-0208 — CVSS 10.0 (critical): rpc.ypupdated (NIS) allows remote users to execute arbitrary commands.
• CVE-1999-0040 — CVSS 7.2 (high): Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.
• CVE-1999-0138 — CVSS 7.2 (high): The suidperl and sperl program do not give up root privileges when changing UIDs back to the original users, allowing root access.
• CVE-1999-0024 — CVSS 5.0 (medium): DNS cache poisoning via BIND, by predictable query IDs.
• CVE-1999-0078 — CVSS 1.9 (low): pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call.