CVE-1999-0432: Medium severity HPE HP-UX vulnerability
ftp on HP-UX 11.00 allows local users to gain privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
HPE HP-UX ftpfrom your environment.Uninstall or remove the FTP server/package from HP-UX 11.00 systems if the service is not required.
- Configuration
Disable the FTP service on HP-UX 11.00 systems to mitigate the local privilege escalation vulnerability (stop the ftp daemon and prevent it from starting at boot).
ftp (HPE HP-UX 11.00) enabled = false - Compensating control
Restrict local account access and apply least-privilege controls (limit which users have local login/shell access, use restricted shells, and tighten sudoers rules) to reduce the impact of a local-privilege escalation vulnerability.
- Operational
Audit systems for signs of exploitation (review logs, check for unexpected root-owned processes/authorized_keys changes, SUID/SGID modifications) and, if compromise is suspected, rotate any potentially exposed credentials and rebuild or restore affected systems from known-good backups.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0432?
CVE-1999-0432 is classified as a high-severity vulnerability that allows local users to gain elevated privileges on HP-UX 11.00.
How do I fix CVE-1999-0432?
To fix CVE-1999-0432, apply the latest security patches provided by HPE for HP-UX 11.00.
Who is affected by CVE-1999-0432?
CVE-1999-0432 affects local users on systems running HP-UX 11.00.
What type of vulnerability is CVE-1999-0432?
CVE-1999-0432 is a local privilege escalation vulnerability in the FTP service of HP-UX 11.00.
Is CVE-1999-0432 still relevant today?
CVE-1999-0432 is primarily of historical interest as HP-UX 11.00 is an outdated operating system, but it highlights the importance of managing local user privileges.