CVE-1999-0436: Medium severity HP DESMS vulnerability
Domain Enterprise Server Management System (DESMS) in HP-UX allows local users to gain privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
HP-UX/Domain Enterprise Server Management System (DESMS)from your environment.Uninstall DESMS from HP-UX systems if it is not required to prevent local privilege escalation.
- Configuration
Disable the DESMS service on affected HP-UX systems if it is not required.
Domain Enterprise Server Management System (DESMS) enabled = false - Compensating control
Limit and harden local user accounts on HP-UX hosts: remove unnecessary local accounts, restrict interactive/login shells to trusted administrators only, and enforce least privilege until an official vendor fix is available.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0436?
CVE-1999-0436 has been assigned a moderate severity level as it allows local users to gain elevated privileges.
How do I fix CVE-1999-0436?
To address CVE-1999-0436, ensure that the Domain Enterprise Server Management System (DESMS) is updated to the latest patched version.
Who is affected by CVE-1999-0436?
CVE-1999-0436 affects local users of HP-UX systems running specific versions of the Domain Enterprise Server Management System.
What systems are vulnerable to CVE-1999-0436?
Vulnerable systems include HP-UX 10.20 and 11.00 that have the Domain Enterprise Server Management System installed.
Is there a workaround for CVE-1999-0436?
A temporary workaround for CVE-1999-0436 includes restricting access to the DESMS to prevent unprivileged users from exploiting the vulnerability.