CVE-1999-0325: High severity HPE HP-UX vulnerability
vheumnt program in HP-UX allows local users to create root files through symlinks.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
vhe_u_mnt (HP-UX)from your environment.Uninstall or remove the vhe_u_mnt program from systems where it is not required to eliminate the vulnerability that allows local users to create root files via symlinks.
- Configuration
Change ownership and permissions of the vhe_u_mnt binary so only root can execute it (for example, set owner to root and remove execute permission for non-root users) to prevent local users from exploiting symlinks.
vhe_u_mnt (HP-UX) file execution permissions = restrict to root only (e.g., root ownership and no execute permission for other users) - Compensating control
If removal or permission changes are not possible immediately, restrict which local accounts can access or execute vhe_u_mnt using filesystem ACLs or other host-level access controls so unprivileged users cannot run the program.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0325?
CVE-1999-0325 is considered a high severity vulnerability due to its potential to allow local users to create root files.
How does CVE-1999-0325 impact HP-UX systems?
CVE-1999-0325 allows local users on HP-UX systems to escalate their privileges by creating root-level files through symlinks.
How do I fix CVE-1999-0325?
To fix CVE-1999-0325, apply the relevant patches provided for HP-UX versions 8 and 9.
Who is affected by CVE-1999-0325?
CVE-1999-0325 affects local users on HP-UX operating systems, specifically versions 8 and 9.
Is there a workaround for CVE-1999-0325?
A recommended workaround for CVE-1999-0325 includes restricting local user access to the vhe_u_mnt program to minimize exploitation risks.