CVE Catalog

CVE-1999-1239

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.47%

37th percentile - higher than 37% of all known CVEs

Summary

HP-UX 9.x does not properly enable the Xauthority mechanism in certain conditions, which could allow local users to access the X display even when they have not explicitly been authorized to do so.

Risk Assessment

The risk is that unauthorized users may gain access to the X session, potentially leading to data leakage or unauthorized actions on the system.

Recommendation

It is recommended to update the HP-UX system to the latest version that fixes the Xauthority mechanism and review local user permissions.

Original NVD description (English source)

HP-UX 9.x does not properly enable the Xauthority mechanism in certain conditions, which could allow local users to access the X display even when they have not explicitly been authorized to do so.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS