CVE-1999-1238: Medium severity HPE HP-UX vulnerability
Vulnerability in CORE-DIAG fileset in HP message catalog in HP-UX 9.05 and earlier allows local users to gain privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
For systems running HPE HP-UX 9.05 and earlier, restrict local user access and reduce the number of local accounts. Disable or remove unneeded local accounts, restrict interactive/shell logins to trusted administrators only, and limit physical/console access to trusted personnel to reduce the risk of local privilege escalation via the vulnerable CORE-DIAG fileset.
- Operational
Monitor HP-UX 9.05 and earlier systems for signs of local privilege escalation (suspicious local logins, unexpected setuid binaries, changes to system message catalogs). If compromise is suspected, perform forensic investigation, rebuild affected hosts from known-good media, and rotate any credentials that may have been exposed.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1238?
CVE-1999-1238 is considered a high-severity vulnerability due to the potential for local users to gain elevated privileges.
How do I fix CVE-1999-1238?
To fix CVE-1999-1238, update to an HP-UX version newer than 9.05 or apply any patches provided by HPE.
Who is affected by CVE-1999-1238?
CVE-1999-1238 affects local users of HP-UX systems version 9.05 and earlier, as well as version 8.
What operating systems are impacted by CVE-1999-1238?
CVE-1999-1238 impacts HP-UX versions 8 and 9, specifically up to 9.05.
Is CVE-1999-1238 a remote vulnerability?
No, CVE-1999-1238 is a local privilege escalation vulnerability that requires local access to the system.