CVE-1999-1133

Medium

Published: 01/09/1997(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.47%

37th percentile - higher than 37% of all known CVEs

Summary

HP-UX 9.x and 10.x running X windows may allow local attackers to gain privileges via vuefile, vuepad, dtfile, or dtpad, which do not authenticate users.

Risk Assessment

Attackers may exploit this vulnerability to gain unauthorized access to the system, potentially leading to serious security breaches.

Recommendation

It is recommended to update HP-UX to the latest version and implement appropriate authorization mechanisms for the mentioned applications.

Original NVD description (English source)

HP-UX 9.x and 10.x running X windows may allow local attackers to gain privileges via (1) vuefile, (2) vuepad, (3) dtfile, or (4) dtpad, which do not authenticate users.