Tru64

Vendor:

First CVE: Feb 23, 2001 · Active for 25 years

23
Total CVEs
More Total CVEs than 95% of tracked products
5.8
Avg CVEs / Year
Higher CVE frequency than 90% of tracked products
6.8
Avg CVSS
Higher Avg CVSS than 39% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Tru64 over time

Volume of CVEsAvg CVSS Base Score
First CVE
Feb 23, 2001
25 years ago
Most Recent CVE
May 2, 2005
7,753 days ago

CVE Severity & Scoring

Tru6423 CVEs
All CVEs352,231 CVEs
LowMediumHigh
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown23 (100.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High0 (0.0%)
Unknown23 (100.0%)
User Interaction
None0 (0.0%)
Unknown23 (100.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None0 (0.0%)
Unknown23 (100.0%)

Top CVEs

Signals from CVEs in this product scope (23 CVEs).

23 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to
May 5, 200310.088NOYES
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.
Oct 6, 200310.073NOYES
The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length
Apr 2, 200310.063NOYES
Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to execute arbitrary code via an argument to the _TT_CREA
Sep 5, 200210.042NONO
Multiple buffer overflows in Samba before 2.2.8a may allow remote attackers to execute arbitrary code or cause a denial of service, as discovered by the Samba team and a different
May 5, 200310.035NONO
Buffer overflow in libc in Compaq Tru64 4.0F, 5.0, 5.1 and 5.1A allows attackers to execute arbitrary code via long (1) LANG and (2) LOCPATH environment variables.
Dec 31, 20027.533NONO
Buffer overflow in msgchk in Digital UNIX 4.0G and earlier allows local users to execute arbitrary code via a long command line argument.
Sep 10, 20017.229NOYES
Buffer overflow in dxterm allows local users to execute arbitrary code via a long -xrm argument.
Oct 4, 20027.227NOYES
CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC procedure
Jul 23, 20027.227NONO
CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument
Jul 23, 20027.526NONO

Exploit Exposure

Signals from CVEs in this product scope (23 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
2 CVEs
8.7% of CVEs· 97th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
6 CVEs
26.1% of CVEs· 90th percentile

Social Chatter

Signals from CVEs in this product scope (23 CVEs).

Media Mentions

Signals from CVEs in this product scope (23 CVEs).

Top CNAs Publishing CVEs For Tru64

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
5.1_pk6_bl2058.941.8%03
5.1_pk5_bl1978.430.2%04
5.1_pk4_bl1868.635.0%04
5.1_pk3_bl1768.635.0%04
5.1b_pk2_bl2237.321.4%01
5.1b_pk1_bl158.941.8%03
5.1b58.941.8%03
5.1a_pk5_bl2337.321.4%01
5.1a_pk4_bl2137.321.4%01
5.1a_pk3_bl378.530.2%03
5.1a_pk2_bl278.430.1%04
5.1a_pk1_bl178.430.1%04
5.1a147.918.2%04
5.1167.416.3%04
5.0_pk4_bl1849.336.6%03
5.0_pk4_bl1749.336.6%03
5.0f310.048.5%02
5.0a_pk3_bl1758.929.6%03
5.0a127.616.1%03
5.078.121.6%03