Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-1999-0014

4 documents4 sources

Severity

7.2HIGH

EPSS

3.2%

top 13.07%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

Timeline

PublishedJan 21

Latest updateApr 30

Description

Unauthorized privileged access or denial of service via dtappgather program in CDE.

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

▶NVDcde/cde6 versions+5

▶NVDhp/vvos10.24

▶NVDibm/aix4.1, 4.2, 4.3+2

▶NVDhp/hp-ux10.10, 10.20, 11.00+2

GHSA

GHSA-wgf5-r6hp-p33g: Unauthorized privileged access or denial of service via dtappgather program in CDE↗2022-04-30

▶

CVEList

CVE-1999-0014: Unauthorized privileged access or denial of service via dtappgather program in CDE↗1999-09-29

▶

Exploit-DB

HP HP-UX 10.20/11.0 / IBM AIX 4.3 / SCO Unixware 7.0 / Sun Solaris 2.6 - Change File Permission↗1999-11-03

▶