CVE-1999-0688: Buffer Overflow
Buffer overflows in HP Software Distributor (SD) for HPUX 10.x and 11.x.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
HPE HP-UX HP Software Distributor (SD)from your environment.Uninstall or disable HP Software Distributor (SD) on HP-UX 10.x and 11.x systems if the component is not required.
- Compensating control
Restrict network and administrative access to systems running HP Software Distributor (SD) (for example, apply firewall rules, ACLs, or network segmentation) and isolate affected hosts until vendor updates are available.
- Operational
Monitor HPE security advisories for HP-UX and HP Software Distributor (SD) and apply vendor-provided patches or updates when they are released. Treat SD-running hosts as high-risk and increase logging and intrusion detection until fixes are applied.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0688?
CVE-1999-0688 is classified as a high severity vulnerability due to buffer overflow issues.
How do I fix CVE-1999-0688?
To fix CVE-1999-0688, apply the recommended patches provided by HP for HP-UX versions 10.x and 11.x.
What are the affected versions of HP-UX for CVE-1999-0688?
CVE-1999-0688 affects HP-UX versions 10.24 and 11.00.
What types of attacks can exploit CVE-1999-0688?
CVE-1999-0688 can be exploited through remote code execution due to the buffer overflow.
Is there a workaround for CVE-1999-0688 if I cannot patch immediately?
A potential workaround for CVE-1999-0688 is to restrict access to the vulnerable service until a patch can be applied.