CVE-1999-0311
HighExploitation Probability (EPSS)
Low risk41th percentile - higher than 41% of all known CVEs
Summary
fpkg2swpk in HP-UX allows local users to gain root access.
Risk Assessment
This vulnerability poses a serious security risk as local users can obtain full administrative privileges.
Recommendation
It is recommended to restrict access to the fpkg2swpk tool and monitor user accounts to prevent unauthorized access.
Other vulnerabilities in HP-UX
See all- CVE-2000-0972Medium
HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target file during the crontab session, quitting the session, and reading the error messages that crontab generates.
- CVE-1999-1308Medium
Certain programs in HP-UX 10.20 do not properly handle large user IDs (UID) or group IDs (GID) over 60000, which could allow local users to gain privileges.
- CVE-1999-1239Medium
HP-UX 9.x does not properly enable the Xauthority mechanism in certain conditions, which could allow local users to access the X display even when they have not explicitly been authorized to do so.
Original NVD description (English source)
fpkg2swpk in HP-UX allows local users to gain root access.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS