CVE-1999-0097: Critical severity HP HP-UX vulnerability
The AIX FTP client can be forced to execute commands from a malicious server through shell metacharacters (e.g. a pipe character).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
IBM AIX ftp clientfrom your environment.If the FTP client is not required, remove or uninstall the FTP client from affected AIX systems to eliminate exposure.
- Configuration
Disable the AIX FTP client or disable automatic processing of server-supplied commands in system configuration or local policies until a vendor-provided patch is applied.
IBM AIX FTP client ftp_client_enabled = false - Compensating control
Restrict or block FTP (TCP port 21) access to untrusted servers using network controls (firewall, ACLs, proxy). Allow FTP only to known/trusted servers until a vendor fix is available.
- Operational
Avoid connecting AIX hosts to untrusted or unknown FTP servers and review/modify automated scripts that use ftp to ensure they do not pass server-supplied data to a shell. Maintain monitoring/logging of FTP connections for suspicious activity.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0097?
CVE-1999-0097 is considered to have a high severity due to the potential for unauthorized command execution through the FTP client.
How do I fix CVE-1999-0097?
To fix CVE-1999-0097, update the affected FTP client to the latest version that addresses this vulnerability.
What versions of software are affected by CVE-1999-0097?
CVE-1999-0097 affects various versions of IBM AIX and SunOS, including versions 4.1, 4.2, 5.3, and multiple HP-UX versions.
What are the potential impacts of CVE-1999-0097?
The exploitation of CVE-1999-0097 can lead to unauthorized access and execution of commands on the affected systems.
Is there a workaround for CVE-1999-0097?
A temporary workaround for CVE-1999-0097 includes disabling the FTP client or restricting its use until a patch is applied.