CVE-1999-1239: Medium severity HPE HP-UX vulnerability
HP-UX 9.x does not properly enable the Xauthority mechanism in certain conditions, which could allow local users to access the X display even when they have not explicitly been authorized to do so.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Enable the Xauthority mechanism on affected HP-UX 9.x systems so the X display enforces explicit authorization for local connections.
HP-UX (X server / X11) Xauthority enabled = true - Compensating control
Until a vendor fix is available, restrict untrusted local user access to systems and limit who can connect to the X display (for example, use local access controls to prevent unauthorized local accounts from accessing the X display).
- Operational
Monitor HP vendor advisories for a supplied patch or update for HP-UX 9.x and apply the vendor-provided remediation when it becomes available.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1239?
CVE-1999-1239 is considered a moderate severity vulnerability as it allows unauthorized access to the X display for local users.
How do I fix CVE-1999-1239?
To mitigate CVE-1999-1239, ensure proper configuration of the Xauthority mechanism and apply any relevant patches from HPE for HP-UX 9.x.
Who is affected by CVE-1999-1239?
CVE-1999-1239 affects local users of HP-UX 9.x systems that do not have properly configured Xauthority settings.
What are the implications of CVE-1999-1239?
The implications of CVE-1999-1239 include the potential for local users to gain unauthorized access to the graphical display, leading to further exploitation.
How can I verify if my system is vulnerable to CVE-1999-1239?
To verify if your system is vulnerable to CVE-1999-1239, check the configuration of Xauthority on your HP-UX 9.x installation.