MC/ServiceGuard and MC/LockManager in HP-UX allows local users to gain privileges through SAM.

Domain Enterprise Server Management System (DESMS) in HP-UX allows local users to gain privileges.

rpc.pcnfsd in HP gives remote root access by changing the permissions on the main printer spool directory.

HP-UX aserver program allows local users to gain privileges via a symlink attack.

Denial of service in HP-UX SharedX recserv program.

Vulnerability in Predictive on HP-UX 11.0 and earlier, and MPE/iX 5.5 and earlier, allows attackers to compromise data transfer for Predictive messages (using e-mail or modem) between customer and Response Center Predictive systems.

Buffer overflow in NIS+, in Sun's rpc.nisd program.

Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd).

Unauthorized privileged access or denial of service via dtappgather program in CDE.

ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.

Teardrop IP denial of service.

Land IP denial of service.

The AIX FTP client can be forced to execute commands from a malicious server through shell metacharacters (e.g. a pipe character).

Character-Terminal User Environment (CUE) in HP-UX 11.0 and earlier allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the IOERROR.mytty file.

An SNMP community name is the default (e.g. public), null, or missing.