CVE-1999-0309: High severity HPE HP-UX vulnerability
HP-UX vgdisplay program gives root access to local users.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
HP-UX/vgdisplayfrom your environment.Remove or disable the vgdisplay binary on affected systems until a vendor-supplied patch/fix is available. If removal is not feasible, rename the executable or move it out of users' PATH to prevent local users from running it.
- Compensating control
Restrict who can log in or execute system administration utilities on affected HP-UX hosts. Limit local interactive logins to trusted administrator accounts and use filesystem permissions (e.g., restrict execute permission on the vgdisplay binary) or access controls to prevent non-administrative users from running vgdisplay.
- Operational
Audit systems for signs of unauthorized privilege escalation via vgdisplay (review authentication and sudo/su logs, check for unexpected root-owned processes). Rotate credentials and keys for any accounts that may have been exposed or used by local users with elevated access, and rebuild or reimage compromised hosts as needed.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0309?
CVE-1999-0309 is considered a high severity vulnerability allowing unauthorized root access.
How do I fix CVE-1999-0309?
To fix CVE-1999-0309, update to a secure version of HP-UX that addresses this vulnerability.
Which versions of HP-UX are affected by CVE-1999-0309?
CVE-1999-0309 affects HP-UX versions 10.00, 10.01, 10.10, 10.20, and 10.24.
Who can exploit CVE-1999-0309?
CVE-1999-0309 can be exploited by local users with access to the affected HP-UX system.
What is the impact of CVE-1999-0309?
The impact of CVE-1999-0309 is the potential for local users to gain root privileges, compromising system security.