Overview 807 matches · 1 in Waratek scope · 0 protected · 1 exploited · 0 CISA KEV · 258 public PoC · 9 EPSS ≥ 0.5
807matches
1in Waratek scope0.1%
0protected0.0%
1exploited0.1%
0CISA KEV0.0%
258public PoC32.0%
9EPSS ≥ 0.51.1%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
1
0.1%
No exploit published
0
0.0%
Outside Waratek scope
1
0.1%
Not applicable
805
99.8%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
807
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
1
0.1%
Working exploit published
258
32.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
548
67.9%
split by
peak 357 / year
19891
Not applicable1
Medium1
not blocked1
No public exploit1
19902
Not applicable2
Medium2
not blocked2
Working exploit published1
No public exploit1
19914
Not applicable4
Medium4
not blocked4
No public exploit4
19920
19933
Not applicable3
Medium3
not blocked3
No public exploit3
199410
Not applicable10
Medium10
not blocked10
Working exploit published2
No public exploit8
19956
Not applicable6
Medium6
not blocked6
Working exploit published2
No public exploit4
199621
Not applicable21
Medium21
not blocked21
Working exploit published5
No public exploit16
199789
Not applicable89
Medium89
not blocked89
Working exploit published18
No public exploit71
199885
Not applicable85
Medium85
not blocked85
Working exploit published11
No public exploit74
1999357
Outside Waratek scope1
Not applicable356
Medium357
not blocked357
Working exploit published119
No public exploit238
2000229
Mitigation candidate1
Not applicable228
Medium229
not blocked229
Exploited1
Working exploit published100
No public exploit128
198919901991199219931994199519961997199819992000
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2000-0583 | Medium | 2000-06-30 | Not applicable | No public exploit | vchkpw program in vpopmail before version 4.8 does not properly cleanse an untrusted format string used in a call to syslog, which allows remote attackers to cause a denial of service via a USER or PASS command that contains arbitrary formatting directives. |
| CVE-2000-0582 | Medium | 2000-06-30 | Not applicable | Working exploit published | Check Point FireWall-1 4.0 and 4.1 allows remote attackers to cause a denial of service by sending a stream of invalid commands (such as binary zeros) to the SMTP Security Server proxy. |
| CVE-2000-0581 | Medium | 2000-06-30 | Not applicable | Working exploit published | Windows 2000 Telnet Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros, which causes the server to crash. |
| CVE-2000-0580 | Medium | 2000-06-30 | Not applicable | Working exploit published | Windows 2000 Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros to various TCP and UDP ports, which significantly increases the CPU utilization. |
| CVE-2000-0569 | Medium | 2000-06-30 | Not applicable | Working exploit published | Sybergen Sygate allows remote attackers to cause a denial of service by sending a malformed DNS UDP packet to its internal interface. |
| CVE-2000-0568 | Medium | 2000-06-30 | Not applicable | No public exploit | Sybergen Secure Desktop 2.1 does not properly protect against false router advertisements (ICMP type 9), which allows remote attackers to modify default routes. |
| CVE-2000-0612 | Medium | 2000-06-29 | Not applicable | No public exploit | Windows 95 and Windows 98 do not properly process spoofed ARP packets, which allows remote attackers to overwrite static entries in the cache table. |
| CVE-2000-0593 | Medium | 2000-06-27 | Not applicable | No public exploit | WinProxy 2.0 and 2.0.1 allows remote attackers to cause a denial of service by sending an HTTP GET request without listing an HTTP version number. |
| CVE-2000-0570 | Medium | 2000-06-27 | Not applicable | Working exploit published | FirstClass Internet Services server 5.770, and other versions before 6.1, allows remote attackers to cause a denial of service by sending an email with a long To: mail header. |
| CVE-2000-0616 | Medium | 2000-06-26 | Not applicable | No public exploit | Vulnerability in HP TurboIMAGE DBUTIL allows local users to gain additional privileges via DBUTIL.PUB.SYS. |
| CVE-2000-0598 | Medium | 2000-06-26 | Not applicable | No public exploit | Fortech Proxy+ allows remote attackers to bypass access restrictions for to the administration service by redirecting their connections through the telnet proxy. |
| CVE-2000-0588 | Medium | 2000-06-26 | Not applicable | Working exploit published | SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whose contents SawMill attempts to parse as configuration commands. |
| CVE-2000-0601 | Medium | 2000-06-25 | Not applicable | Working exploit published | LeafChat 1.7 IRC client allows a remote IRC server to cause a denial of service by rapidly sending a large amount of error messages. |
| CVE-2000-0611 | Medium | 2000-06-23 | Not applicable | No public exploit | The default configuration of NetWin dMailWeb and cwMail trusts all POP servers, which allows attackers to bypass normal authentication and cause a denial of service. |
| CVE-2000-0610 | Medium | 2000-06-23 | Not applicable | No public exploit | NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to bypass authentication and use the server for mail relay via a username that contains a carriage return. |
| CVE-2000-0618 | Medium | 2000-06-22 | Not applicable | No public exploit | Buffer overflow in xconq and cconq game programs on Red Hat Linux allows local users to gain additional privileges via long DISPLAY environmental variable. |
| CVE-2000-0617 | Medium | 2000-06-22 | Not applicable | Working exploit published | Buffer overflow in xconq and cconq game programs on Red Hat Linux allows local users to gain additional privileges via long USER environmental variable. |
| CVE-2000-0540 | Medium | 2000-06-22 | Not applicable | No public exploit | JSP sample files in Allaire JRun 2.3.x allow remote attackers to access arbitrary files (e.g. via viewsource.jsp) or obtain configuration information. |
| CVE-2000-0539 | Medium | 2000-06-22 | Not applicable | No public exploit | Servlet examples in Allaire JRun 2.3.x allow remote attackers to obtain sensitive information, e.g. listing HttpSession ID's via the SessionServlet servlet. |
| CVE-2000-0609 | Medium | 2000-06-21 | Not applicable | No public exploit | NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to cause a denial of service via a long username parameter. |
| CVE-2000-0608 | Medium | 2000-06-21 | Not applicable | No public exploit | NetWin dMailWeb and cwMail 2.6i and earlier allows remote attackers to cause a denial of service via a long POP parameter (pophost). |
| CVE-2000-0604 | Medium | 2000-06-21 | Not applicable | No public exploit | gkermit in Red Hat Linux is improperly installed with setgid uucp, which allows local users to modify files owned by uucp. |
| CVE-2000-0602 | Medium | 2000-06-21 | Not applicable | No public exploit | Secure Locate (slocate) in Red Hat Linux allows local users to gain privileges via a malformed configuration file that is specified in the LOCATE_PATH environmental variable. |
| CVE-2000-0513 | Medium | 2000-06-21 | Not applicable | No public exploit | CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service by authenticating with a user name that does not exist or does not have a shadow password. |
| CVE-2000-0511 | Medium | 2000-06-21 | Not applicable | No public exploit | CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service via a CGI POST request. |
| CVE-2000-0510 | Medium | 2000-06-21 | Not applicable | No public exploit | CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service via a malformed IPP request. |
| CVE-2000-0500 | Medium | 2000-06-21 | Mitigation candidate | Working exploit published | The default configuration of BEA WebLogic 5.1.0 allows a remote attacker to view source code of programs by requesting a URL beginning with /file/, which causes the default servlet to display the file without further processing. |
| CVE-2000-0620 | Medium | 2000-06-19 | Not applicable | No public exploit | libX11 X library allows remote attackers to cause a denial of service via a resource mask of 0, which causes libX11 to go into an infinite loop. |
| CVE-2000-0529 | Medium | 2000-06-19 | Not applicable | No public exploit | Net Tools PKI Server allows remote attackers to cause a denial of service via a long HTTP request. |
| CVE-2000-0528 | Medium | 2000-06-19 | Not applicable | No public exploit | Net Tools PKI Server does not properly restrict access to remote attackers when the XUDA template files do not contain absolute pathnames for other files. |
| CVE-2000-0504 | Medium | 2000-06-19 | Not applicable | Working exploit published | libICE in XFree86 allows remote attackers to cause a denial of service by specifying a large value which is not properly checked by the SKIP_STRING macro. |
| CVE-2000-0512 | Medium | 2000-06-16 | Not applicable | No public exploit | CUPS (Common Unix Printing System) 1.04 and earlier does not properly delete request files, which allows a remote attacker to cause a denial of service. |
| CVE-2000-0480 | Medium | 2000-06-16 | Not applicable | Working exploit published | Dragon telnet server allows remote attackers to cause a denial of service via a long username. |
| CVE-2000-0479 | Medium | 2000-06-16 | Not applicable | No public exploit | Dragon FTP server allows remote attackers to cause a denial of service via a long USER command. |
| CVE-2000-0484 | Medium | 2000-06-15 | Not applicable | Working exploit published | Small HTTP Server ver 3.06 contains a memory corruption bug causing a memory overflow. The overflowed buffer crashes into a Structured Exception Handler resulting in a Denial of Service. |
| CVE-2000-0475 | Medium | 2000-06-15 | Not applicable | No public exploit | Windows 2000 allows a local user process to access another user's desktop within the same windows station, aka the "Desktop Separation" vulnerability. |
| CVE-2000-0543 | Medium | 2000-06-14 | Not applicable | No public exploit | The command port for PGP Certificate Server 2.5.0 and 2.5.1 allows remote attackers to cause a denial of service if their hostname does not have a reverse DNS entry and they connect to port 4000. |
| CVE-2000-0478 | Medium | 2000-06-14 | Not applicable | No public exploit | In some cases, Norton Antivirus for Exchange (NavExchange) enters a "fail-open" state which allows viruses to pass through the server. |
| CVE-2000-0477 | Medium | 2000-06-14 | Not applicable | No public exploit | Buffer overflow in Norton Antivirus for Exchange (NavExchange) allows remote attackers to cause a denial of service via a .zip file that contains long file names. |
| CVE-2000-0542 | Medium | 2000-06-13 | Not applicable | No public exploit | Tigris remote access server before 11.5.4.22 does not properly record Radius accounting information when a user fails the initial login authentication but subsequently succeeds. |
| CVE-2000-0535 | Medium | 2000-06-12 | Not applicable | No public exploit | OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices, which are absent on FreeBSD Alpha systems, which causes them to produce weak keys which may be more easily broken. |
| CVE-2000-0555 | Medium | 2000-06-09 | Not applicable | No public exploit | Ceilidh allows remote attackers to cause a denial of service via a large number of POST requests. |
| CVE-2000-0550 | Medium | 2000-06-09 | Not applicable | No public exploit | Kerberos 4 KDC program improperly frees memory twice (aka "double-free"), which allows remote attackers to cause a denial of service. |
| CVE-2000-0549 | Medium | 2000-06-09 | Not applicable | No public exploit | Kerberos 4 KDC program does not properly check for null termination of AUTH_MSG_KDC_REQUEST requests, which allows remote attackers to cause a denial of service via a malformed request. |
| CVE-2000-0548 | Medium | 2000-06-09 | Not applicable | No public exploit | Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the e_msg variable in the kerb_err_reply function. |
| CVE-2000-0547 | Medium | 2000-06-09 | Not applicable | No public exploit | Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the localrealm variable in the process_v4 function. |
| CVE-2000-0546 | Medium | 2000-06-09 | Not applicable | No public exploit | Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the lastrealm variable in the set_tgtkey function. |
| CVE-2000-0526 | Medium | 2000-06-09 | Not applicable | Working exploit published | mailview.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack. |
| CVE-2000-0554 | Medium | 2000-06-08 | Not applicable | No public exploit | Ceilidh allows remote attackers to obtain the real path of the Ceilidh directory via the translated_path hidden form field. |
| CVE-2000-0522 | Medium | 2000-06-08 | Not applicable | No public exploit | RSA ACE/Server allows remote attackers to cause a denial of service by flooding the server's authentication request port with UDP packets, which causes the server to crash. |
| CVE-2000-0377 | Medium | 2000-06-08 | Not applicable | Working exploit published | The Remote Registry server in Windows NT 4.0 allows local authenticated users to cause a denial of service via a malformed request, which causes the winlogon process to fail, aka the "Remote Registry Access Authentication" vulnerability. |
| CVE-2000-0538 | Medium | 2000-06-07 | Not applicable | Working exploit published | ColdFusion Administrator for ColdFusion 4.5.1 and earlier allows remote attackers to cause a denial of service via a long login password. |
| CVE-2000-0534 | Medium | 2000-06-07 | Not applicable | No public exploit | The apsfilter software in the FreeBSD ports package does not properly read user filter configurations, which allows local users to execute commands as the lpd user. |
| CVE-2000-0552 | Medium | 2000-06-06 | Not applicable | Working exploit published | ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not delete it, which allows local users to obtain sensitive information. |
| CVE-2000-0482 | Medium | 2000-06-06 | Not applicable | Working exploit published | Check Point Firewall-1 allows remote attackers to cause a denial of service by sending a large number of malformed fragmented IP packets. |
| CVE-2000-0556 | Medium | 2000-06-05 | Not applicable | No public exploit | Buffer overflow in the web interface for Cmail 2.4.7 allows remote attackers to cause a denial of service by sending a large user name to the user dialog running on port 8002. |
| CVE-2000-0544 | Medium | 2000-06-05 | Not applicable | No public exploit | Windows NT and Windows 2000 hosts allow a remote attacker to cause a denial of service via malformed DCE/RPC SMBwriteX requests that contain an invalid data length. |
| CVE-2000-0524 | Medium | 2000-06-05 | Not applicable | No public exploit | Microsoft Outlook and Outlook Express allow remote attackers to cause a denial of service by sending email messages with blank fields such as BCC, Reply-To, Return-Path, or From. |
| CVE-2000-0521 | Medium | 2000-06-05 | Not applicable | Working exploit published | Savant web server allows remote attackers to read source code of CGI scripts via a GET request that does not include the HTTP version number. |
| CVE-2000-0492 | Medium | 2000-06-04 | Not applicable | Working exploit published | PassWD 1.2 uses weak encryption (trivial encoding) to store passwords, which allows an attacker who can read the password file to easliy decrypt the passwords. |
| CVE-2000-0468 | Medium | 2000-06-02 | Not applicable | Working exploit published | man in HP-UX 10.20 and 11 allows local attackers to overwrite files via a symlink attack. |
| CVE-2000-0507 | Medium | 2000-06-01 | Not applicable | Working exploit published | Imate Webmail Server 2.5 allows remote attackers to cause a denial of service via a long HELO command. |
| CVE-2000-0476 | Medium | 2000-06-01 | Not applicable | Working exploit published | xterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape characters which force the window to be resized. |
| CVE-2000-0505 | Medium | 2000-05-31 | Not applicable | Working exploit published | The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large number of / characters. |
| CVE-2000-0495 | Medium | 2000-05-30 | Not applicable | Working exploit published | Microsoft Windows Media Encoder allows remote attackers to cause a denial of service via a malformed request, aka the "Malformed Windows Media Encoder Request" vulnerability. |
| CVE-2000-0486 | Medium | 2000-05-30 | Not applicable | No public exploit | Buffer overflow in Cisco TACACS+ tac_plus server allows remote attackers to cause a denial of service via a malformed packet with a long length field. |
| CVE-2000-0564 | Medium | 2000-05-29 | Not applicable | No public exploit | The guestbook CGI program in ICQ Web Front service for ICQ 2000a, 99b, and others allows remote attackers to cause a denial of service via a URL with a long name parameter. |
| CVE-2000-0517 | Medium | 2000-05-26 | Not applicable | No public exploit | Netscape 4.73 and earlier does not properly warn users about a potentially invalid certificate if the user has previously accepted the certificate for a different web site, which could allow remote attackers to spoof a legitimate web site by compromising that site's DNS information. |
| CVE-2000-0404 | Medium | 2000-05-25 | Not applicable | No public exploit | The CIFS Computer Browser service allows remote attackers to cause a denial of service by sending a ResetBrowser frame to the Master Browser, aka the "ResetBrowser Frame" vulnerability. |
| CVE-2000-0403 | Medium | 2000-05-25 | Not applicable | No public exploit | The CIFS Computer Browser service on Windows NT 4.0 allows a remote attacker to cause a denial of service by sending a large number of host announcement requests to the master browse tables, aka the "HostAnnouncement Flooding" or "HostAnnouncement Frame" vulnerability. |
| CVE-2000-0444 | Medium | 2000-05-24 | Not applicable | Working exploit published | HP Web JetAdmin 6.0 allows remote attackers to cause a denial of service via a malformed URL to port 8000. |
| CVE-2000-0441 | Medium | 2000-05-24 | Not applicable | No public exploit | Vulnerability in AIX 3.2.x and 4.x allows local users to gain write access to files on locally or remotely mounted AIX filesystems. |
| CVE-2000-0399 | Medium | 2000-05-24 | Not applicable | No public exploit | Buffer overflow in MDaemon POP server allows remote attackers to cause a denial of service via a long user name. |
| CVE-2000-0396 | Medium | 2000-05-24 | Not applicable | Working exploit published | The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the attacker to read source code for web scripts such as .ASP files. |
| CVE-2000-0418 | Medium | 2000-05-23 | Not applicable | Working exploit published | The Cayman 3220-H DSL router allows remote attackers to cause a denial of service via oversized ICMP echo (ping) requests. |
| CVE-2000-0451 | Medium | 2000-05-19 | Not applicable | Working exploit published | The Intel express 8100 ISDN router allows remote attackers to cause a denial of service via oversized or fragmented ICMP packets. |
| CVE-2000-0436 | Medium | 2000-05-19 | Not applicable | Working exploit published | MetaProducts Offline Explorer 1.2 and earlier allows remote attackers to access arbitrary files via a .. (dot dot) attack. |
| CVE-2000-0463 | Medium | 2000-05-18 | Not applicable | Working exploit published | BeOS 5.0 allows remote attackers to cause a denial of service via fragmented TCP packets. |
| CVE-2000-0453 | Medium | 2000-05-18 | Not applicable | Working exploit published | XFree86 3.3.x and 4.0 allows a user to cause a denial of service via a negative counter value in a malformed TCP packet that is sent to port 6000. |
| CVE-2000-0452 | Medium | 2000-05-18 | Not applicable | Working exploit published | Buffer overflow in the ESMTP service of Lotus Domino Server 5.0.1 allows remote attackers to cause a denial of service via a long MAIL FROM command. |
| CVE-2000-0394 | Medium | 2000-05-18 | Not applicable | Working exploit published | NetProwler 3.0 allows remote attackers to cause a denial of service by sending malformed IP packets that trigger NetProwler's Man-in-the-Middle signature. |
| CVE-2000-0465 | Medium | 2000-05-17 | Not applicable | Working exploit published | Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files via the frame, aka the "Frame Domain Verification" vulnerability. |
| CVE-2000-0417 | Medium | 2000-05-17 | Not applicable | Working exploit published | The HTTP administration interface to the Cayman 3220-H DSL router allows remote attackers to cause a denial of service via a long username or password. |
| CVE-2000-0350 | Medium | 2000-05-17 | Not applicable | Working exploit published | A debugging feature in NetworkICE ICEcap 2.0.23 and earlier is enabled, which allows a remote attacker to bypass the weak authentication and post unencrypted events. |
| CVE-2000-0395 | Medium | 2000-05-16 | Not applicable | Working exploit published | Buffer overflow in CProxy 3.3 allows remote users to cause a denial of service via a long HTTP request. |
| CVE-1999-0980 | Medium | 2000-05-16 | Not applicable | Working exploit published | Windows NT Service Control Manager (SCM) allows remote attackers to cause a denial of service via a malformed argument in a resource enumeration request. |
| CVE-2000-0397 | Medium | 2000-05-15 | Not applicable | Working exploit published | The EMURL web-based email account software encodes predictable identifiers in user session URLs, which allows a remote attacker to access a user's email account. |
| CVE-2000-0415 | Medium | 2000-05-12 | Not applicable | No public exploit | Buffer overflow in Outlook Express 4.x allows attackers to cause a denial of service via a mail or news message that has a .jpg or .bmp attachment with a long file name. |
| CVE-2000-0416 | Medium | 2000-05-11 | Not applicable | No public exploit | NTMail 5.x allows network users to bypass the NTMail proxy restrictions by redirecting their requests to NTMail's web configuration server. |
| CVE-2000-0408 | Medium | 2000-05-11 | Not applicable | Working exploit published | IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file extensions, aka the "Malformed Extension Data in URL" vulnerability. |
| CVE-2000-0411 | Medium | 2000-05-10 | Not applicable | Working exploit published | Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the env_report parameter. |
| CVE-2000-0410 | Medium | 2000-05-10 | Not applicable | No public exploit | ColdFusion Server 4.5.1 allows remote attackers to cause a denial of service by making repeated requests to a CFCACHE tagged cache file that is not stored in memory. |
| CVE-2000-0304 | Medium | 2000-05-10 | Not applicable | No public exploit | Microsoft IIS 4.0 and 5.0 with the IISADMPWD virtual directory installed allows a remote attacker to cause a denial of service via a malformed request to the inetinfo.exe program, aka the "Undelimited .HTR Request" vulnerability. |
| CVE-2000-0383 | Medium | 2000-05-08 | Not applicable | No public exploit | The file transfer component of AOL Instant Messenger (AIM) reveals the physical path of the transferred file to the remote recipient. |
| CVE-2000-0413 | Medium | 2000-05-06 | Not applicable | Working exploit published | The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML, HTM, ASP, and SHTML files by requesting a file that does not exist, which generates an error message that reveals the path. |
| CVE-2000-0426 | Medium | 2000-05-05 | Not applicable | Working exploit published | UltraBoard 1.6 and other versions allow remote attackers to cause a denial of service by referencing UltraBoard in the Session parameter, which causes UltraBoard to fork copies of itself. |
| CVE-2000-0423 | Medium | 2000-05-05 | Not applicable | Working exploit published | Buffer overflow in Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary commands via long parameters such as group, cmd, and utag. |
| CVE-2000-0381 | Medium | 2000-05-05 | Not applicable | Working exploit published | The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup information by referencing a non-existing database in the db parameter. |
| CVE-2000-0427 | Medium | 2000-05-04 | Not applicable | Working exploit published | The Aladdin Knowledge Systems eToken device allows attackers with physical access to the device to obtain sensitive information without knowing the PIN of the owner by resetting the PIN in the EEPROM. |
| CVE-2000-0414 | Medium | 2000-05-04 | Not applicable | No public exploit | Vulnerability in shutdown command for HP-UX 11.X and 10.X allows allows local users to gain privileges via malformed input variables. |