CVE-1999-1136: Infoleak
Vulnerability in Predictive on HP-UX 11.0 and earlier, and MPE/iX 5.5 and earlier, allows attackers to compromise data transfer for Predictive messages (using e-mail or modem) between customer and Response Center Predictive systems.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Until a vendor-provided fix is available, disable or stop using e-mail and modem channels for transferring Predictive messages between customer systems and the Response Center, or restrict/segregate those communications to trusted, monitored networks to reduce risk of compromise.
- Operational
Identify and inventory systems running Predictive on HP-UX 11.0 and earlier, and MPE/iX 5.5 and earlier. Assess whether these systems are used to send or receive Predictive messages to/from the Response Center and document any e-mail or modem-based data transfers.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1136?
CVE-1999-1136 is considered to be a medium severity vulnerability that allows attackers to compromise Predictive message data transfer.
How do I fix CVE-1999-1136?
To fix CVE-1999-1136, users should upgrade to the latest versions of HP-UX and MPE/iX that are not affected by this vulnerability.
What systems are affected by CVE-1999-1136?
CVE-1999-1136 affects HP-UX versions up to 11.0 and MPE/iX versions up to 5.5.
What type of attacks can be executed due to CVE-1999-1136?
CVE-1999-1136 allows for unauthorized access to data transferred through Predictive messages, potentially leading to information disclosure.
Is CVE-1999-1136 still a concern for current systems?
CVE-1999-1136 is primarily a concern for legacy systems running HP-UX 11.0 and earlier or MPE/iX 5.5 and earlier.