Tru64

Vendor:

First CVE: Aug 1, 1997 · Active for 28 years

45
Total CVEs
More Total CVEs than 97% of tracked products
5.0
Avg CVEs / Year
Higher CVE frequency than 87% of tracked products
6.2
Avg CVSS
Higher Avg CVSS than 24% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Tru64 over time

Volume of CVEsAvg CVSS Base Score
First CVE
Aug 1, 1997
28 years ago
Most Recent CVE
Nov 7, 2008
6,470 days ago

CVE Severity & Scoring

Tru6445 CVEs
All CVEs352,719 CVEs
LowMediumHigh
Attack Vector
Local1 (2.2%)
Network0 (0.0%)
Unknown44 (97.8%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low1 (2.2%)
High0 (0.0%)
Unknown44 (97.8%)
User Interaction
None1 (2.2%)
Unknown44 (97.8%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None1 (2.2%)
Unknown44 (97.8%)

Top CVEs

Signals from CVEs in this product scope (45 CVEs).

45 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
Unspecified vulnerability in the Secure Shell (SSH) in HP Tru64 UNIX 5.1B-4 and 5.1B-3 allows remote attackers to identify valid users via unspecified vectors, probably related to
May 22, 200710.037NOYES
Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbi
Sep 18, 20077.636NOYES
PHP remote file inclusion vulnerability in index.php in Achievo 1.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the config_atkroot parameter.
May 17, 200710.036NOYES
Buffer overflow in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code via a long _XKB_CHARSET environment variable to (1) dxpause, (2) dxconso
Sep 2, 20027.534NOYES
Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain root privileges via (1) su, (2) chsh, (3) passwd, (4) chfn, (5) dxchpwd, and (6
Aug 1, 20027.234NOYES
Ezboo webstats, possibly 3.0.3, allows remote attackers to bypass authentication and gain access via a direct request to (1) update.php and (2) config.php.
Feb 21, 20077.531NOYES
Buffer overflow in HP Tru64 UNIX allows local users to execute arbitrary code via a long argument to /usr/bin/at.
Sep 9, 20027.230NOYES
ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.
Aug 1, 19974.030NONO
Multiple cross-site scripting (XSS) vulnerabilities in freePBX 2.2.x allow remote attackers to inject arbitrary web script or HTML via the (1) From, (2) To, (3) Call-ID, (4) User-A
Apr 24, 20076.828NOYES
Unspecified vulnerability in dop in HP Tru64 UNIX 5.1B-4, 5.1B-3, and 5.1A PK6 allows local users to gain privileges via a large amount of data in the environment, as demonstrated
May 9, 20077.227NOYES

Exploit Exposure

Signals from CVEs in this product scope (45 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
12 CVEs
26.7% of CVEs· 90th percentile

Social Chatter

Signals from CVEs in this product scope (45 CVEs).

Media Mentions

Signals from CVEs in this product scope (45 CVEs).

Top CNAs Publishing CVEs For Tru64

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
5.1_pk6_bl20110.02.3%00
5.1_pk5_bl19110.02.3%00
5.1_pk4_bl18110.02.3%00
5.1_pk3_bl17110.02.3%00
5.1b_pk2_bl2226.21.4%00
5.1b_p3k_bl2415.11.2%00
5.1b447.32.1%02
5.1b367.03.0%02
5.1b214.60.6%00
5.1b124.03.4%00
5.1b27.31.5%00
5.1a_pk5_bl23110.02.3%00
5.1a_pk4_bl21110.02.3%00
5.1a_pk3_bl3110.02.3%00
5.1a_pk2_bl2110.02.3%00
5.1a_pk1_bl1110.02.3%00
5.1af25.92.3%01
5.1a205.72.3%03
5.1185.72.7%04
5.0a185.62.8%03