CVE-1999-0308: Medium severity HPE HP-UX vulnerability
HP-UX gwind program allows users to modify arbitrary files.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
HP-UX gwindfrom your environment.Uninstall or remove the gwind program from affected HP-UX systems if it is not required to eliminate the ability for users to modify arbitrary files.
- Configuration
Change filesystem permissions and ownership so that non-privileged users cannot execute or access the gwind binary (restrict execution to root/administrators).
HP-UX gwind executable/access permission = restricted to administrative users only - Compensating control
Limit access to hosts running the gwind program via network controls (firewall, ACLs) and restrict which user accounts can access those hosts to reduce exposure.
- Operational
Audit systems for unauthorized or unexpected file modifications that may have occurred via gwind, restore affected files from known-good backups, and review logs to identify potentially impacted accounts or scope of changes.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0308?
CVE-1999-0308 is considered to have a critical severity due to the potential for unauthorized file modification.
How do I fix CVE-1999-0308?
To fix CVE-1999-0308, you should upgrade to a patched version of HP-UX that resolves this vulnerability.
What software versions are affected by CVE-1999-0308?
CVE-1999-0308 affects HP-UX versions 8 and 9.
What does CVE-1999-0308 exploit?
CVE-1999-0308 exploits a flaw in the gwind program that allows users to modify arbitrary files.
Can CVE-1999-0308 be mitigated without an upgrade?
Mitigation of CVE-1999-0308 without an upgrade may involve restricting user permissions to prevent unauthorized access.