CVE-1999-0423: Medium severity HPE HP-UX vulnerability
Vulnerability in hpterm on HP-UX 10.20 allows local users to gain additional privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
hptermfrom your environment.Uninstall or disable the hpterm component on HP-UX 10.20 systems if it is not required.
- Compensating control
Restrict local user access to HP-UX 10.20 hosts until a vendor fix is available (disable unnecessary accounts, restrict who can log in, and limit interactive shell access).
- Operational
Monitor and review system audit logs on HP-UX 10.20 for signs of privilege escalation and investigate any suspicious local activity.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0423?
CVE-1999-0423 has been classified as a high severity vulnerability due to its potential to allow local users to gain additional privileges.
How do I fix CVE-1999-0423?
To fix CVE-1999-0423, apply the latest patches provided by HP for HP-UX 10.20.
Who is affected by CVE-1999-0423?
Local users on HP-UX 10.20 systems are affected by CVE-1999-0423.
What type of vulnerability is CVE-1999-0423?
CVE-1999-0423 is a local privilege escalation vulnerability.
Is there a workaround for CVE-1999-0423?
Currently, the recommended approach is to apply the patch, as there are no documented workarounds for CVE-1999-0423.