CVE-1999-0962: Buffer Overflow
Buffer overflow in HPUX passwd command allows local users to gain root privileges via a command line option.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Restrict local access to affected HP-UX systems until a vendor fix is available: limit interactive logins to trusted administrators, disable or remove unneeded local accounts, restrict console and physical access, and isolate the host from untrusted users or networks.
- Operational
Monitor and audit for signs of exploitation: review authentication and system logs for unexpected use of the passwd command or unauthorized privilege escalations; if compromise is suspected, assume root access may have been obtained and perform incident response (containment, forensic collection, and system rebuild as necessary).
- Operational
Apply vendor-supplied fixes as soon as HPE releases a patch or update for the HP-UX passwd vulnerability; track vendor advisories and deploy the official remediation when available.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0962?
CVE-1999-0962 is classified as a high severity vulnerability due to its potential to allow local users to gain root privileges.
How do I fix CVE-1999-0962?
To fix CVE-1999-0962, it is recommended to update the HPUX system to a version that addresses the buffer overflow in the passwd command.
Who is affected by CVE-1999-0962?
CVE-1999-0962 affects users of HPUX versions 9 and 10.
What are the risks associated with CVE-1999-0962?
The risks associated with CVE-1999-0962 include unauthorized access and control over the system, leading to potential data breaches and system compromise.
Is there a patch available for CVE-1999-0962?
Yes, a patch or update is typically provided by HP for HPUX systems to mitigate the risk of CVE-1999-0962.