CVE-1999-1139 — HP Hp-ux vulnerability

3 documents3 sources
Severity
7.2HIGHNVD
EPSS
0.1%
top 67.83%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
HP Hp-ux
Timeline
PublishedSep 1
Latest updateApr 30

Description

Character-Terminal User Environment (CUE) in HP-UX 11.0 and earlier allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the IOERROR.mytty file.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages1 packages

▶NVDhp/hp-ux11.00

Patches

Patch: security-archive.merton.ox.ac.uk ↗Patch: www.codetalker.com ↗Patch: security-archive.merton.ox.ac.uk ↗

🔴Vulnerability Details

2
GHSA
GHSA-mxfh-mpgw-mj7f: Character-Terminal User Environment (CUE) in HP-UX 11↗2022-04-30
▶
CVEList
CVE-1999-1139: Character-Terminal User Environment (CUE) in HP-UX 11↗2002-03-09
▶
CVE-1999-1139 — HP Hp-ux vulnerability | cvebase