CVE-1999-1311: Medium severity HPE HP-UX vulnerability
Vulnerability in dtlogin and dtsession in HP-UX 10.20 and 10.10 allows local users to bypass authentication and gain privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
HP-UX dtlogin and dtsessionfrom your environment.Uninstall or remove the dtlogin and dtsession components from affected HP-UX 10.20 and 10.10 systems when they are not needed to eliminate the vulnerable components.
- Configuration
Disable the dtlogin and dtsession services/login manager on affected HP-UX 10.20 and 10.10 systems if these components are not required to reduce the risk of local authentication bypass.
HP-UX dtlogin / dtsession enable = false - Compensating control
Restrict local account and console access on affected HP-UX 10.20 and 10.10 hosts (for example via local account policies, host-based access controls, or firewall rules) to limit potential exploitation by local users.
- Operational
Monitor affected systems for signs of unauthorized privilege escalation and, if compromise is suspected, rotate any potentially exposed credentials or keys and conduct forensic investigation.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1311?
CVE-1999-1311 is classified as a high severity vulnerability due to its potential to allow local users to bypass authentication.
How do I fix CVE-1999-1311?
To fix CVE-1999-1311, upgrade your HP-UX system to a version that patches this vulnerability.
Who is affected by CVE-1999-1311?
Local users of HP-UX versions 10.10 and 10.20 are affected by CVE-1999-1311.
What systems are impacted by CVE-1999-1311?
CVE-1999-1311 impacts HP-UX operating systems specifically version 10.10 and 10.20.
What type of attack does CVE-1999-1311 enable?
CVE-1999-1311 enables local users to elevate their privileges by bypassing authentication mechanisms.