Ultrix
Vendor:
First CVE: May 1, 1991 · Active for 35 years
7
Total CVEs
More Total CVEs than 83% of tracked products
2.3
Avg CVEs / Year
Higher CVE frequency than 73% of tracked products
7.4
Avg CVSS
Higher Avg CVSS than 48% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Ultrix over time
Volume of CVEsAvg CVSS Base Score
First CVE
May 1, 1991
35 years ago
Most Recent CVE
Oct 4, 2002
8,694 days ago
CVE Severity & Scoring
Ultrix7 CVEs
29%
71%
All CVEs352,231 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown7 (100.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High0 (0.0%)
Unknown7 (100.0%)
User Interaction
None0 (0.0%)
Unknown7 (100.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None0 (0.0%)
Unknown7 (100.0%)
Top CVEs
Signals from CVEs in this product scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-1999-0046HIGH Buffer overflow of rlogin program using TERM environmental variable. | Feb 6, 1997 | 10.0 | 67 | NO | YES |
CVE-1999-0170HIGH Remote attackers can mount an NFS file system in Ultrix or OSF, even if it is denied on the access list. | Jan 1, 1997 | 7.5 | 39 | NO | YES |
CVE-1999-1194HIGH chroot in Digital Ultrix 4.1 and 4.0 is insecurely installed, which allows local users to gain privileges. | May 1, 1991 | 7.2 | 27 | NO | YES |
CVE-1999-1032HIGH Vulnerability in LAT/Telnet Gateway (lattelnet) on Ultrix 4.1 and 4.2 allows attackers to gain root privileges. | Dec 31, 1991 | 10.0 | 25 | NO | NO |
CVE-2002-1128HIGH Buffer overflow in inc mail utility for Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long MH environment variable. | Oct 4, 2002 | 7.2 | 23 | NO | NO |
CVE-1999-1225MEDIUM rpc.mountd on Linux, Ultrix, and possibly other operating systems, allows remote attackers to determine the existence of a file on the server by attempting to mount that file, whic | Aug 24, 1997 | 5.0 | 15 | NO | NO |
CVE-1999-1415MEDIUM Vulnerability in /usr/bin/mail in DEC ULTRIX before 4.2 allows local users to gain privileges. | Aug 23, 1991 | 4.6 | 14 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (7 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
1 CVE
14.3% of CVEs· 97th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
2 CVEs
28.6% of CVEs· 90th percentile
Social Chatter
Signals from CVEs in this product scope (7 CVEs).
Media Mentions
Signals from CVEs in this product scope (7 CVEs).
Top CNAs Publishing CVEs For Ultrix
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 4.2 | 1 | 10.0 | 2.4% | 0 | 0 |
| 4.1 | 2 | 8.6 | 1.7% | 0 | 1 |
| 4.0 | 1 | 7.2 | 1.0% | 0 | 1 |
| 3.0 | 1 | 7.2 | 0.5% | 0 | 0 |