Secure OS
by Microfocus
CVEs (8)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2002-0836 | 0.01 | — | 0.08 | Oct 28, 2002 | dvips converter for Postscript files in the tetex package calls the system() function insecurely, which allows remote attackers to execute arbitrary commands via certain print jobs, possibly involving fonts. | |||
| CVE-2002-0835 | 0.01 | — | 0.07 | Oct 4, 2002 | Preboot eXecution Environment (PXE) server allows remote attackers to cause a denial of service (crash) via certain DHCP packets from Voice-Over-IP (VOIP) phones. | |||
| CVE-2023-33032 | 0.00 | — | 0.00 | Jan 2, 2024 | Memory corruption in TZ Secure OS while requesting a memory allocation from TA region. | |||
| CVE-2023-28545 | 0.00 | — | 0.00 | Nov 7, 2023 | Memory corruption in TZ Secure OS while loading an app ELF. | |||
| CVE-2002-1232 | 0.00 | — | 0.03 | Nov 4, 2002 | Memory leak in ypdb_open in yp_db.c for ypserv before 2.5 in the NIS package 3.9 and earlier allows remote attackers to cause a denial of service (memory consumption) via a large number of requests for a map that does not exist. | |||
| CVE-2002-0638 | 0.00 | — | 0.01 | Aug 12, 2002 | setpwnam.c in the util-linux package, as included in Red Hat Linux 7.3 and earlier, and other operating systems, does not properly lock a temporary file when modifying /etc/passwd, which may allow local users to gain privileges via a complex race condition that uses an open file… | |||
| CVE-2001-1563 | 0.00 | — | 0.05 | Dec 31, 2001 | Unknown vulnerability in Tomcat 3.2.1 running on HP Secure OS for Linux 1.0 allows attackers to access servlet resources. NOTE: due to the vagueness of the vendor advisory, it is not clear whether this issue is already covered by other CVE identifiers. | |||
| CVE-2001-1506 | 0.00 | — | 0.01 | Dec 31, 2001 | Unknown vulnerability in the file system protection subsystem in HP Secure OS Software for Linux 1.0 allows additional user privileges on some files beyond what is specified in the file system protection rules, which allows local users to conduct unauthorized operations on… |
- CVE-2002-0836Oct 28, 2002risk 0.01cvss —epss 0.08
dvips converter for Postscript files in the tetex package calls the system() function insecurely, which allows remote attackers to execute arbitrary commands via certain print jobs, possibly involving fonts.
- CVE-2002-0835Oct 4, 2002risk 0.01cvss —epss 0.07
Preboot eXecution Environment (PXE) server allows remote attackers to cause a denial of service (crash) via certain DHCP packets from Voice-Over-IP (VOIP) phones.
- CVE-2023-33032Jan 2, 2024risk 0.00cvss —epss 0.00
Memory corruption in TZ Secure OS while requesting a memory allocation from TA region.
- CVE-2023-28545Nov 7, 2023risk 0.00cvss —epss 0.00
Memory corruption in TZ Secure OS while loading an app ELF.
- CVE-2002-1232Nov 4, 2002risk 0.00cvss —epss 0.03
Memory leak in ypdb_open in yp_db.c for ypserv before 2.5 in the NIS package 3.9 and earlier allows remote attackers to cause a denial of service (memory consumption) via a large number of requests for a map that does not exist.
- CVE-2002-0638Aug 12, 2002risk 0.00cvss —epss 0.01
setpwnam.c in the util-linux package, as included in Red Hat Linux 7.3 and earlier, and other operating systems, does not properly lock a temporary file when modifying /etc/passwd, which may allow local users to gain privileges via a complex race condition that uses an open file…
- CVE-2001-1563Dec 31, 2001risk 0.00cvss —epss 0.05
Unknown vulnerability in Tomcat 3.2.1 running on HP Secure OS for Linux 1.0 allows attackers to access servlet resources. NOTE: due to the vagueness of the vendor advisory, it is not clear whether this issue is already covered by other CVE identifiers.
- CVE-2001-1506Dec 31, 2001risk 0.00cvss —epss 0.01
Unknown vulnerability in the file system protection subsystem in HP Secure OS Software for Linux 1.0 allows additional user privileges on some files beyond what is specified in the file system protection rules, which allows local users to conduct unauthorized operations on…