CVE-1999-1408: Low severity hp HP-UX vulnerability
Vulnerability in AIX 4.1.4 and HP-UX 10.01 and 9.05 allows local users to cause a denial of service (crash) by using a socket to connect to a port on the localhost, calling shutdown to clear the socket, then using the same socket to connect to a different port on localhost.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Restrict local user access and privileges. Disable or remove unneeded local accounts, restrict who may log in locally, enforce least-privilege (require sudo for administrative actions) and prevent untrusted/local users from running code or services that can create or manipulate sockets on affected AIX and HP-UX hosts.
- Compensating control
Track vendor advisories for IBM AIX and HPE HP-UX and apply vendor-supplied fixes as soon as they are released and tested. Until an official patch is available, treat systems hosting sensitive/local services as higher risk and limit local access accordingly.
- Operational
Prepare detection and recovery procedures for denial-of-service crashes. Monitor system logs for socket-related crashes, configure alerting for process or system crashes, and document/run procedures to restart affected services or reboot hosts to recover from a crash caused by this vulnerability.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1408?
CVE-1999-1408 has a severity rating that indicates it allows local users to cause a denial of service by crashing the system.
How do I fix CVE-1999-1408?
To fix CVE-1999-1408, ensure that systems are updated to patched versions that prevent unauthorized socket operations.
What systems are affected by CVE-1999-1408?
CVE-1999-1408 affects IBM AIX versions 4.1.1 to 4.1.5 and HP-UX versions 9.05 and 10.01.
How does CVE-1999-1408 exploit a system?
CVE-1999-1408 exploits the system by allowing a user to connect to multiple ports using the same socket and subsequently cause the service to crash.
Is there a workaround for CVE-1999-1408?
A potential workaround for CVE-1999-1408 is to restrict local user access or to implement firewall rules that limit socket connections.