CVE-2000-0468: Medium severity HPE HP-UX vulnerability
man in HP-UX 10.20 and 11 allows local attackers to overwrite files via a symlink attack.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
HPE HP-UX manfrom your environment.If the man program is not required on an affected HPE HP-UX 10.20 or 11 system, uninstall or disable it until a vendor-supplied patch is applied.
- Compensating control
Isolate affected hosts (HPE HP-UX 10.20 and 11) and restrict local user logins to trusted administrators only until a vendor fix is available to prevent local attackers from exploiting the man symlink vulnerability.
- Operational
Inventory systems to identify all HPE HP-UX 10.20 and 11 installations and prioritize them for remediation. Monitor and audit for signs of symlink exploitation (unexpected file overwrites) on those systems.
- Operational
Apply the vendor-supplied patch or advisory for the man vulnerability on HPE HP-UX 10.20 and 11 when it becomes available and follow vendor guidance for remediation.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0468?
CVE-2000-0468 has a moderate severity rating due to its potential for local file overwrites.
How do I fix CVE-2000-0468?
Fixing CVE-2000-0468 involves disabling access to the susceptible features or updating to a patched version of HP-UX.
Who is affected by CVE-2000-0468?
CVE-2000-0468 affects local users of HP-UX versions 10.20 and 11.00 who can exploit symlink vulnerabilities.
What type of vulnerability is CVE-2000-0468?
CVE-2000-0468 is classified as a symlink attack vulnerability allowing file overwrites.
Can CVE-2000-0468 lead to further exploits?
Yes, CVE-2000-0468 can potentially lead to privilege escalation or unauthorized data manipulation if exploited.