CVE-1999-0004 | ByteOS Network

Vulnerability Details :

CVE-1999-0004

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-04 Feb, 2000 | 05:00

Updated At-01 Aug, 2024 | 16:27

MIME buffer overflow in email clients, e.g. Solaris mailtool and Outlook.

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:04 Feb, 2000 | 05:00

Updated At:01 Aug, 2024 | 16:27

▼CVE Numbering Authority (CNA)

MIME buffer overflow in email clients, e.g. Solaris mailtool and Outlook.

Affected Products

Vendor

Product

Versions

Affected

n/a

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-008	vendor-advisory x_refsource_MS

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-008

Resource:

vendor-advisory

x_refsource_MS

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-008	vendor-advisory x_refsource_MS x_transferred

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-008

Resource:

vendor-advisory

x_refsource_MS

x_transferred

▼National Vulnerability Database (NVD)

Source:cve@mitre.org

Published At:16 Dec, 1997 | 05:00

Updated At:03 Apr, 2025 | 01:03

MIME buffer overflow in email clients, e.g. Solaris mailtool and Outlook.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P

Type: Primary

Version: 2.0

Base score: 5.0

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:N/C:N/I:N/A:P

CPE Matches

cpe:2.3:a:hp:dtmail:*:*:*:*:*:*:*:*

university_of_washington>>pine>>4.02

cpe:2.3:a:university_of_washington:pine:4.02:*:*:*:*:*:*:*

sco>>unixware>>7.0

cpe:2.3:o:sco:unixware:7.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov

CWE ID: NVD-CWE-Other

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-008	cve@mitre.org	N/A
https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-008	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-008

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-008

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

129Records found

Matching Score-8

Assigner-Internet Systems Consortium (ISC)

Matching Score-8

Assigner-Internet Systems Consortium (ISC)

CVSS Score-7.5||HIGH

EPSS-69.02% / 98.59%

||

7 Day CHG~0.00%

Published-16 Jan, 2019 | 20:00

Updated-16 Sep, 2024 | 17:58

A flaw in the "deny-answer-aliases" feature can cause an assertion failure in named

"deny-answer-aliases" is a little-used feature intended to help recursive server operators protect end users against DNS rebinding attacks, a potential method of circumventing the security model used by client browsers. However, a defect in this feature makes it easy, when the feature is in use, to experience an assertion failure in name.c. Affects BIND 9.7.0->9.8.8, 9.9.0->9.9.13, 9.10.0->9.10.8, 9.11.0->9.11.4, 9.12.0->9.12.2, 9.13.0->9.13.2.

Vendor-Canonical Ltd.Debian GNU/Linux openSUSE HP Inc.Internet Systems Consortium, Inc.NetApp, Inc.Red Hat, Inc.

Product-enterprise_linux_server ubuntu_linux debian_linux enterprise_linux_server_eus enterprise_linux_server_aus enterprise_linux_workstation data_ontap_edge hp-ux bind enterprise_linux_desktop leap BIND 9

CWE ID-CWE-617

Reachable Assertion

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-1.29% / 79.32%

||

7 Day CHG~0.00%

Published-29 Apr, 2006 | 10:00

Updated-03 Apr, 2025 | 01:03

Unspecified vulnerability in HP StorageWorks Secure Path for Windows 4.0C-SP2 before 20060419 allows remote attackers to cause an unspecified denial of service via unknown vectors.

Vendor-n/a HP Inc.

Product-storageworks_secure_path_windows n/a

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.3||MEDIUM

EPSS-0.99% / 76.48%

||

7 Day CHG~0.00%

Published-18 Jan, 2018 | 02:00

Updated-03 Oct, 2024 | 20:36

Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u171 and 7u161; JRockit: R28.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, JRockit. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

Vendor-HP Inc.Oracle Corporation Red Hat, Inc.

Product-enterprise_linux_server xp_command_view xp7_command_view enterprise_linux_server_eus xp_p9000_command_view jre enterprise_linux_workstation satellite jdk enterprise_linux_desktop struxureware_data_center_expert jrockit Java

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.3||MEDIUM

EPSS-0.29% / 52.22%

||

7 Day CHG~0.00%

Published-19 Apr, 2018 | 02:00

Updated-06 May, 2025 | 15:15

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

Vendor-Debian GNU/Linux Schneider Electric SE Oracle Corporation HP Inc.Red Hat, Inc.Canonical Ltd.

Product-enterprise_linux_server_aus enterprise_linux_server_tus jdk jrockit enterprise_linux_server enterprise_linux_workstation jre struxureware_data_center_expert debian_linux xp7_command_view ubuntu_linux enterprise_linux_desktop enterprise_linux_server_eus satellite Java

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.3||MEDIUM

EPSS-0.12% / 31.53%

||

7 Day CHG+0.01%

Published-19 Apr, 2018 | 02:00

Updated-03 Oct, 2024 | 20:17

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

Vendor-Canonical Ltd.Debian GNU/Linux HP Inc.The Apache Software Foundation Oracle Corporation Red Hat, Inc.

Product-enterprise_linux_server ubuntu_linux debian_linux xp7_command_view enterprise_linux_server_eus jre enterprise_linux_server_aus enterprise_linux_workstation xerces-j satellite jdk enterprise_linux_server_tus enterprise_linux_desktop struxureware_data_center_expert jrockit Java

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.3||MEDIUM

EPSS-0.69% / 71.47%

||

7 Day CHG~0.00%

Published-19 Apr, 2018 | 02:00

Updated-06 May, 2025 | 15:15

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

Vendor-Debian GNU/Linux Schneider Electric SE Oracle Corporation HP Inc.Red Hat, Inc.Canonical Ltd.

Product-enterprise_linux_server_aus enterprise_linux_server_tus jdk jrockit enterprise_linux_server enterprise_linux_workstation jre struxureware_data_center_expert debian_linux xp7_command_view ubuntu_linux enterprise_linux_desktop enterprise_linux_server_eus Java

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.3||MEDIUM

EPSS-0.18% / 39.43%

||

7 Day CHG+0.01%

Published-19 Apr, 2018 | 02:00

Updated-06 May, 2025 | 15:15

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

Vendor-Debian GNU/Linux Schneider Electric SE Oracle Corporation HP Inc.Red Hat, Inc.Canonical Ltd.

Product-enterprise_linux_server_aus enterprise_linux_server_tus jdk jrockit enterprise_linux_server enterprise_linux_workstation jre struxureware_data_center_expert debian_linux xp7_command_view ubuntu_linux enterprise_linux_desktop enterprise_linux_server_eus satellite Java

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.3||MEDIUM

EPSS-0.10% / 28.03%

||

7 Day CHG+0.01%

Published-19 Apr, 2018 | 02:00

Updated-03 Oct, 2024 | 20:18

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

Vendor-Canonical Ltd.Debian GNU/Linux HP Inc.Oracle Corporation Red Hat, Inc.

Product-enterprise_linux_server ubuntu_linux debian_linux xp7_command_view enterprise_linux_server_eus jre enterprise_linux_server_aus enterprise_linux_workstation satellite jdk enterprise_linux_server_tus enterprise_linux_desktop struxureware_data_center_expert jrockit Java

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.3||MEDIUM

EPSS-0.10% / 27.98%

||

7 Day CHG~0.00%

Published-18 Jan, 2018 | 02:00

Updated-03 Oct, 2024 | 20:42

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

Vendor-Canonical Ltd.Debian GNU/Linux HP Inc.Oracle Corporation Red Hat, Inc.

Product-enterprise_linux_server ubuntu_linux xp7_command_view enterprise_linux_server_eus enterprise_linux_server_aus satellite jdk struxureware_data_center_expert jrockit xp_command_view debian_linux xp_p9000_command_view jre enterprise_linux_workstation enterprise_linux_server_tus enterprise_linux_desktop Java

Matching Score-8

Assigner-HP Inc.

Matching Score-8

Assigner-HP Inc.

CVSS Score-5||MEDIUM

EPSS-1.41% / 80.21%

||

7 Day CHG~0.00%

Published-16 Aug, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in HP Service Manager Server 7.11, 9.21, and 9.30, and HP Service Center Server 6.28, allows remote attackers to cause a denial of service via unknown vectors.

Vendor-n/a HP Inc.

Product-service_center_server service_manager_server n/a

Matching Score-8

Assigner-HP Inc.

Matching Score-8

Assigner-HP Inc.

CVSS Score-5||MEDIUM

EPSS-1.41% / 80.21%

||

7 Day CHG~0.00%

Published-13 Dec, 2012 | 11:00

Updated-11 Apr, 2025 | 00:51

HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform and 7.3-2, 8.2, 8.3, and 8.4 on the Alpha platform does not properly implement the LOGIN and ACME_SERVER ACMELOGIN programs, which allows remote attackers to cause a denial of service via unspecified vectors.

Vendor-n/a HP Inc.

Product-openvms n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-1.20% / 78.57%

||

7 Day CHG~0.00%

Published-21 Apr, 2009 | 15:00

Updated-07 Aug, 2024 | 04:48

Unspecified vulnerability in HP StorageWorks Storage Mirroring 5 before 5.1.1.1090.15 allows remote attackers to cause a denial of service via unknown vectors.

Vendor-n/a HP Inc.

Product-storageworks_storage_mirroring n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-2.20% / 84.08%

||

7 Day CHG~0.00%

Published-25 Feb, 2008 | 23:00

Updated-07 Aug, 2024 | 08:01

Stack consumption vulnerability in Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service (daemon crash) via a certain packet that triggers the recursive calling of a function.

Vendor-double-take_software n/a HP Inc.

Product-storageworks_double-take double-take n/a

CWE ID-CWE-399

Not Available

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-2.20% / 84.08%

||

7 Day CHG~0.00%

Published-25 Feb, 2008 | 23:00

Updated-07 Aug, 2024 | 08:01

Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service (daemon termination) via (1) a large vector<T> value, which raises a "vector<T> too long" exception; or (2) a certain packet that raises an ospace/time/src\date.cpp exception.

Vendor-double-take_software n/a HP Inc.

Product-storageworks_double-take double-take n/a

CWE ID-CWE-399

Not Available

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-1.32% / 79.57%

||

7 Day CHG~0.00%

Published-01 Jul, 2011 | 10:00

Updated-11 Apr, 2025 | 00:51

The inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to cause a denial of service (daemon exit) via a request containing crafted parameters.

Vendor-n/a HP Inc.

Product-openview_storage_data_protector n/a

Matching Score-8

Assigner-OpenText (formerly Micro Focus)

Matching Score-8

Assigner-OpenText (formerly Micro Focus)

CVSS Score-5.9||MEDIUM

EPSS-0.50% / 65.52%

||

7 Day CHG~0.00%

Published-08 Nov, 2017 | 14:00

Updated-20 Apr, 2025 | 01:37

MFSBGN03791 rev.1 - HPE Content Manager Workgroup Service, Denial of Service (DoS)

A potential security vulnerability has been identified in HPE Content Manager Workgroup Service v9.00. The vulnerability could be remotely exploited to allow Denial of Service (DoS).

Vendor-Micro Focus International Limited HP Inc.

Product-content_manager HPE Content Manager Workgroup Service

CWE ID-CWE-400

Uncontrolled Resource Consumption

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-0.80% / 73.63%

||

7 Day CHG~0.00%

Published-06 Oct, 2007 | 16:00

Updated-07 Aug, 2024 | 15:24

Buffer overflow in NET$CSMACD.EXE in HP OpenVMS 8.3 and earlier allows local users to cause a denial of service (machine crash) via the "MCR MCL SHOW CSMA-CD Port * All" command, which overwrites a Non-Paged Pool Packet.

Vendor-n/a HP Inc.

Product-openvms n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-0.72% / 72.07%

||

7 Day CHG~0.00%

Published-01 Jul, 2011 | 10:00

Updated-11 Apr, 2025 | 00:51

The inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request containing crafted parameters.

Vendor-n/a HP Inc.

Product-openview_storage_data_protector n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-0.88% / 74.91%

||

7 Day CHG~0.00%

Published-05 Jun, 2007 | 23:00

Updated-07 Aug, 2024 | 13:57

Unspecified vulnerability in Hitachi TP1/NET/OSI-TP-Extended on HI-UX/WE2 before 20070213, and on HP-UX before 20070314, allows remote attackers to cause a denial of service via certain data to a port.

Vendor-n/a Hitachi, Ltd.HP Inc.

Product-tp1_net_osi-tp-extended hi_ux_we2 hp-ux n/a

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-5||MEDIUM

EPSS-3.74% / 87.75%

||

7 Day CHG~0.00%

Published-28 Jul, 2013 | 18:00

Updated-11 Apr, 2025 | 00:51

wsf/common/DOMUtils.java in JBossWS Native in Red Hat JBoss Enterprise Application Platform 4.2.0.CP09, 4.3, and 5.1.1; JBoss Enterprise Portal Platform 4.3.CP06 and 5.1.1; JBoss Enterprise SOA Platform 4.2.CP05, 4.3.CP05, and 5.1.0; JBoss Communications Platform 1.2.11 and 5.1.1; JBoss Enterprise BRMS Platform 5.1.0; and JBoss Enterprise Web Platform 5.1.1 does not properly handle recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted request containing an XML document with a DOCTYPE declaration and a large number of nested entity references, a similar issue to CVE-2003-1564.

Vendor-n/a Red Hat, Inc.HP Inc.

Product-jboss_enterprise_application_platform network_node_manager_i jboss_enterprise_brms_platform jboss_communications_platform jboss_enterprise_portal_platform jboss_enterprise_soa_platform jboss_enterprise_web_platform n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-1.54% / 81.05%

||

7 Day CHG~0.00%

Published-18 Jul, 2006 | 21:00

Updated-03 Apr, 2025 | 01:03

Unspecified vulnerability in [SYSEXE]SMPUTIL.EXE in HP OpenVMS 7.3-2 allows local users and "remote users" to cause a denial of service (crash).

Vendor-n/a HP Inc.

Product-openvms n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-5.10% / 89.59%

||

7 Day CHG~0.00%

Published-17 Aug, 2006 | 00:00

Updated-03 Apr, 2025 | 01:03

Unspecified vulnerability in the LP subsystem in HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows remote attackers to cause a denial of service via unknown vectors.

Vendor-n/a HP Inc.

Product-hp-ux n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-2.64% / 85.40%

||

7 Day CHG~0.00%

Published-07 Aug, 2006 | 19:00

Updated-03 Apr, 2025 | 01:03

Hewlett-Packard (HP) ProCurve 3500yl, 6200yl, and 5400zl switches with software before K.11.33 allow remote attackers to cause a denial of service (possibly memory leak or system crash) via unknown vectors.

Vendor-n/a HP Inc.

Product-procurve_switch_6200yl procurve_switch_3500yl procurve_switch_5400zl n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-16.37% / 94.70%

||

7 Day CHG~0.00%

Published-01 Sep, 2004 | 04:00

Updated-03 Apr, 2025 | 01:03

Pine 4.44 and earlier allows remote attackers to cause a denial of service (core dump and failed restart) via an email message with a From header that contains a large number of quotation marks (").

Vendor-university_of_washington n/a

Product-pine n/a

Matching Score-8

Assigner-Hewlett Packard Enterprise (HPE)

Matching Score-8

Assigner-Hewlett Packard Enterprise (HPE)

CVSS Score-7.5||HIGH

EPSS-6.19% / 90.66%

||

7 Day CHG~0.00%

Published-15 Feb, 2018 | 22:00

Updated-16 Sep, 2024 | 20:51

A remote denial of service vulnerability in HPE iMC PLAT version v7.2 E0403P06 and earlier was found. The problem was resolved in iMC PLAT 7.3 E0504 or subsequent version.

Vendor-HP Inc.Hewlett Packard Enterprise (HPE)

Product-intelligent_management_center iMC PLAT

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Hewlett Packard Enterprise (HPE)

Matching Score-8

Assigner-Hewlett Packard Enterprise (HPE)

CVSS Score-7.5||HIGH

EPSS-5.55% / 90.07%

||

7 Day CHG~0.00%

Published-15 Feb, 2018 | 22:00

Updated-17 Sep, 2024 | 00:26

A remote denial of service vulnerability in HPE Systems Insight Manager in all versions prior to 7.6 was found.

Vendor-HP Inc.Hewlett Packard Enterprise (HPE)

Product-systems_insight_manager Systems Insight Manager using OpenSSL

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-5||MEDIUM

EPSS-9.33% / 92.59%

||

7 Day CHG~0.00%

Published-06 Jan, 2006 | 22:00

Updated-03 Apr, 2025 | 01:03

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null dereference.

Vendor-conectiva turbolinux sco xpdf poppler libextractor tetex easy_software_products trustix n/a Mandriva (Mandrakesoft)KDE Slackware Gentoo Foundation, Inc.Debian GNU/Linux Red Hat, Inc.SUSE Ubuntu Silicon Graphics, Inc.

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-1.11% / 77.81%

||

7 Day CHG~0.00%

Published-10 Nov, 2002 | 05:00

Updated-03 Apr, 2025 | 01:03

Unknown vulnerability in Cluster Interconnect for HP TruCluster Server 5.0A, 5.1, and 5.1A may allow local and remote attackers to cause a denial of service.

Vendor-n/a HP Inc.

Product-trucluster_server n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-1.50% / 80.86%

||

7 Day CHG~0.00%

Published-25 Apr, 2005 | 04:00

Updated-03 Apr, 2025 | 01:03

Unknown vulnerability in HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23, when running TCP/IP on IPv4, allows remote attackers to cause a denial of service via certain packets, related to the PMTU, a different vulnerability than CVE-2004-1060.

Vendor-n/a HP Inc.

Product-hp-ux n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-0.71% / 71.84%

||

7 Day CHG~0.00%

Published-06 Feb, 2005 | 05:00

Updated-03 Apr, 2025 | 01:03

Unknown vulnerability in HP-UX B.11.04 running Virtualvault 4.5 through 4.7, when running the TGA daemon, allows remote attackers to cause a denial of service via certain network traffic.

Vendor-n/a HP Inc.

Product-virtualvault n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-0.83% / 74.07%

||

7 Day CHG~0.00%

Published-11 Feb, 2005 | 05:00

Updated-03 Apr, 2025 | 01:03

Unknown vulnerability in BIND 9.2.0 in HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to cause a denial of service.

Vendor-n/a HP Inc.

Product-hp-ux n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-1.29% / 79.32%

||

7 Day CHG~0.00%

Published-12 Apr, 2005 | 04:00

Updated-03 Apr, 2025 | 01:03

Unknown vulnerability in HP OpenView Network Node Manager (NMM) 6.2 through 6.4, and 7.01 through 7.50, allows remote attackers to cause a denial of service.

Vendor-n/a HP Inc.

Product-openview_network_node_manager n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-0.58% / 68.31%

||

7 Day CHG~0.00%

Published-10 May, 2005 | 04:00

Updated-03 Apr, 2025 | 01:03

HP Web Jetadmin 7.5.2546 allows remote attackers to cause a denial of service (crash) via a malformed request, possibly due to a stricmp() error from an invalid use of the "$" character.

Vendor-n/a HP Inc.

Product-web_jetadmin n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-14.02% / 94.18%

||

7 Day CHG~0.00%

Published-17 Sep, 2004 | 04:00

Updated-03 Apr, 2025 | 01:03

The mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (child process crash) via a certain sequence of LOCK requests for a location that allows WebDAV authoring access.

Vendor-turbolinux trustix n/a The Apache Software Foundation Gentoo Foundation, Inc.Mandriva (Mandrakesoft)Debian GNU/Linux Red Hat, Inc.HP Inc.

Product-secure_linux hp-ux turbolinux_desktop turbolinux_server secure_web_server_for_tru64 http_server turbolinux_home enterprise_linux_desktop debian_linux linux enterprise_linux mandrake_linux n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-0.76% / 72.98%

||

7 Day CHG~0.00%

Published-19 Jan, 2005 | 05:00

Updated-03 Apr, 2025 | 01:03

The NFS mountd service on SCO UnixWare 7.1.1, 7.1.3, 7.1.4, and 7.0.1, and possibly other versions, when run from inetd, allows remote attackers to cause a denial of service (memory exhaustion) via a series of requests, which causes inetd to launch a separate process for each request.

Vendor-sco n/a

Product-unixware openserver n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-0.48% / 64.58%

||

7 Day CHG~0.00%

Published-07 May, 2001 | 04:00

Updated-03 Apr, 2025 | 01:03

Vulnerability in the passthru driver in SCO UnixWare 7.1.0 allows an attacker to cause a denial of service.

Vendor-sco n/a

Product-unixware n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-0.50% / 65.65%

||

7 Day CHG~0.00%

Published-24 Oct, 2007 | 23:00

Updated-03 Apr, 2025 | 01:03

Memory leak in HP OpenView Network Node Manager (NNM) 6.2 and 6.4 allows remote attackers to cause a denial of service (memory exhaustion) via crafted TCP packets.

Vendor-n/a HP Inc.

Product-openview_network_node_manager n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-0.80% / 73.66%

||

7 Day CHG~0.00%

Published-08 Jun, 2004 | 04:00

Updated-03 Apr, 2025 | 01:03

HP Integrated Lights-Out (iLO) 1.10 and other versions before 1.55 allows remote attackers to cause a denial of service (hang) by accessing iLO using the TCP/IP reserved port zero.

Vendor-n/a HP Inc.

Product-integrated_lights-out_firmware n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-2.39% / 84.71%

||

7 Day CHG~0.00%

Published-18 Mar, 2004 | 05:00

Updated-03 Apr, 2025 | 01:03

OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.

Vendor-sco lite bluecoat tarantella securecomputing neoteris 4d stonesoft n/a Avaya LLC Novell Sun Microsystems (Oracle Corporation)Symantec Corporation Cisco Systems, Inc.Apple Inc.HP Inc.Check Point Software Technologies Ltd.Silicon Graphics, Inc.OpenBSD Red Hat, Inc.Dell Inc.FreeBSD Foundation OpenSSL VMware (Broadcom Inc.)

Product-wbem firewall_services_module application_and_content_networking_software aaa_server s8700 okena_stormwatch mac_os_x threat_response apache-based_web_server pix_firewall propack s8500 provider-1 call_manager ciscoworks_common_management_foundation clientless_vpn_gateway_4400 secure_content_accelerator vsu s8300 stonebeat_fullcluster gsx_server firewall-1 access_registrar stonebeat_securitycluster gss_4480_global_site_selector tarantella_enterprise stonegate_vpn_client proxysg vpn-1 mac_os_x_server enterprise_linux_desktop mds_9000 enterprise_linux webstar openserver bsafe_ssl-j ios webns sg203 css11000_content_services_switch openssl linux intuity_audix servercluster sg5 openbsd sg208 sg200 cacheos_ca_sa stonegate ciscoworks_common_services gss_4490_global_site_selector imanager instant_virtual_extranet edirectory sidewinder hp-ux converged_communications_server stonebeat_webcluster crypto_accelerator_4000 speed_technologies_litespeed_web_server freebsd pix_firewall_software content_services_switch_11500 css_secure_content_accelerator n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-0.50% / 65.65%

||

7 Day CHG~0.00%

Published-24 Oct, 2007 | 23:00

Updated-03 Apr, 2025 | 01:03

Unspecified vulnerability in HP OpenView Network Node Manager (NNM) 6.2 and 6.4 allows remote attackers to cause a denial of service (CPU consumption) via a crafted TCP packet.

Vendor-n/a HP Inc.

Product-openview_network_node_manager n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-2.17% / 83.98%

||

7 Day CHG~0.00%

Published-18 Mar, 2004 | 05:00

Updated-03 Apr, 2025 | 01:03

The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.

Vendor-sco lite bluecoat tarantella securecomputing neoteris 4d stonesoft n/a Avaya LLC Novell Sun Microsystems (Oracle Corporation)Symantec Corporation Cisco Systems, Inc.Apple Inc.HP Inc.Check Point Software Technologies Ltd.Silicon Graphics, Inc.OpenBSD Red Hat, Inc.Dell Inc.FreeBSD Foundation OpenSSL VMware (Broadcom Inc.)

Product-wbem firewall_services_module application_and_content_networking_software aaa_server s8700 okena_stormwatch mac_os_x threat_response apache-based_web_server pix_firewall propack s8500 provider-1 call_manager ciscoworks_common_management_foundation clientless_vpn_gateway_4400 secure_content_accelerator vsu s8300 stonebeat_fullcluster gsx_server firewall-1 access_registrar stonebeat_securitycluster gss_4480_global_site_selector tarantella_enterprise stonegate_vpn_client proxysg vpn-1 mac_os_x_server enterprise_linux_desktop mds_9000 enterprise_linux webstar openserver bsafe_ssl-j ios webns sg203 css11000_content_services_switch openssl linux intuity_audix servercluster sg5 openbsd sg208 sg200 cacheos_ca_sa stonegate ciscoworks_common_services gss_4490_global_site_selector imanager instant_virtual_extranet edirectory sidewinder hp-ux converged_communications_server stonebeat_webcluster crypto_accelerator_4000 speed_technologies_litespeed_web_server freebsd pix_firewall_software content_services_switch_11500 css_secure_content_accelerator n/a

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-7.5||HIGH

EPSS-3.33% / 87.02%

||

7 Day CHG~0.00%

Published-09 Jun, 2016 | 16:00

Updated-12 Apr, 2025 | 10:46

The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service (heap-based buffer underread and application crash) via a crafted file, involving xmlParseName.

Vendor-n/a Apple Inc.Oracle Corporation Canonical Ltd.HP Inc.Microsoft Corporation libxml2 (XMLSoft)Debian GNU/Linux McAfee, LLC

Product-libxml2 icewall_federation_agent itunes ubuntu_linux watchos web_gateway vm_server windows debian_linux iphone_os mac_os_x tvos n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-0.70% / 71.67%

||

7 Day CHG~0.00%

Published-18 Mar, 2004 | 05:00

Updated-03 Apr, 2025 | 01:03

The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.

Vendor-litespeedtech sco forcepoint bluecoat tarantella securecomputing neoteris 4d stonesoft n/a Avaya LLC Novell Sun Microsystems (Oracle Corporation)Symantec Corporation Cisco Systems, Inc.Apple Inc.HP Inc.Check Point Software Technologies Ltd.Silicon Graphics, Inc.OpenBSD Red Hat, Inc.Dell Inc.FreeBSD Foundation OpenSSL VMware (Broadcom Inc.)

Product-wbem firewall_services_module application_and_content_networking_software aaa_server s8700 okena_stormwatch mac_os_x threat_response apache-based_web_server pix_firewall propack s8500 provider-1 call_manager ciscoworks_common_management_foundation clientless_vpn_gateway_4400 secure_content_accelerator vsu s8300 stonebeat_fullcluster gsx_server firewall-1 access_registrar stonebeat_securitycluster gss_4480_global_site_selector tarantella_enterprise proxysg vpn-1 mac_os_x_server enterprise_linux_desktop mds_9000 enterprise_linux webstar openserver bsafe_ssl-j ios webns sg203 css11000_content_services_switch openssl linux intuity_audix servercluster sg5 openbsd litespeed_web_server sg208 sg200 cacheos_ca_sa stonegate ciscoworks_common_services gss_4490_global_site_selector imanager instant_virtual_extranet edirectory sidewinder hp-ux converged_communications_server stonebeat_webcluster crypto_accelerator_4000 freebsd pix_firewall_software content_services_switch_11500 css_secure_content_accelerator n/a

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-0.68% / 71.08%

||

7 Day CHG~0.00%

Published-12 Sep, 2001 | 04:00

Updated-03 Apr, 2025 | 01:03

Vulnerability in telnet service in HP-UX 10.30 allows attackers to cause a denial of service.

Vendor-n/a HP Inc.

Product-hp-ux n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-0.91% / 75.48%

||

7 Day CHG~0.00%

Published-26 Feb, 2005 | 05:00

Updated-03 Apr, 2025 | 01:03

Unknown vulnerability in diagmond and possibly other applications in HP9000 Series 700/800 running HP-UX B.11.00, B.11.04, B.11.11, and B.11.22 allows remote attackers to cause a denial of service (program failure) via certain network traffic.

Vendor-n/a HP Inc.

Product-hp-ux n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-15.80% / 94.58%

||

7 Day CHG~0.00%

Published-29 Sep, 1999 | 04:00

Updated-03 Apr, 2025 | 01:03

Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.

Vendor-digital sco n/a Linux Kernel Organization, Inc IBM Corporation Sun Microsystems (Oracle Corporation)

Product-linux_kernel internet_faststart aix openserver open_desktop sng sunos osf_1 tcp_ip n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-6.40% / 90.81%

||

7 Day CHG~0.00%

Published-06 Sep, 2003 | 04:00

Updated-03 Apr, 2025 | 01:03

Various Distributed Computing Environment (DCE) implementations, including HP OpenView, allow remote attackers to cause a denial of service (process hang or termination) via certain malformed inputs, as triggered by attempted exploits against the vulnerabilities CVE-2003-0352 or CVE-2003-0605, such as the Blaster/MSblast/LovSAN worm.

Vendor-n/a HP Inc.

Product-openview n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-0.16% / 37.33%

||

7 Day CHG~0.00%

Published-17 May, 2016 | 14:00

Updated-04 Dec, 2025 | 17:15

The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery mode, allows context-dependent attackers to cause a denial of service (infinite recursion, stack consumption, and application crash) via a crafted XML document.

Vendor-n/a Oracle Corporation Red Hat, Inc.Debian GNU/Linux HP Inc.libxml2 (XMLSoft)Canonical Ltd.openSUSE

Product-libxml2 ubuntu_linux solaris enterprise_linux_workstation icewall_federation_agent leap vm_server jboss_core_services enterprise_linux_server_aus enterprise_linux_eus enterprise_linux_desktop icewall_file_manager enterprise_linux_server debian_linux n/a

CWE ID-CWE-674

Uncontrolled Recursion

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-0.84% / 74.39%

||

7 Day CHG~0.00%

Published-15 May, 2003 | 04:00

Updated-03 Apr, 2025 | 01:03

The IMAP Client for Sylpheed 0.8.11 allows remote malicious IMAP servers to cause a denial of service (crash) via certain large literal size values that cause either integer signedness errors or integer overflow errors.

Vendor-ximian mutt sylpheed university_of_washington stuart_parmenter n/a Mozilla Corporation Microsoft Corporation Qualcomm Technologies, Inc.

Product-balsa eudora pine mutt outlook_express evolution mozilla sylpheed_email_client n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-14.56% / 94.30%

||

7 Day CHG~0.00%

Published-01 Apr, 2003 | 05:00

Updated-03 Apr, 2025 | 01:03

hpnst.exe in the GoAhead-Webs webserver for HP Instant TopTools before 5.55 allows remote attackers to cause a denial of service (CPU consumption) via a request to hpnst.exe that calls itself, which causes an infinite loop.

Vendor-n/a HP Inc.

Product-instant_toptools n/a