CVE-1999-1308
MediumExploitation Probability (EPSS)
Low risk38th percentile - higher than 38% of all known CVEs
Summary
Certain programs in HP-UX 10.20 do not properly handle large user IDs (UID) or group IDs (GID) over 60000, which could allow local users to gain privileges.
Risk Assessment
Local users may exploit this vulnerability to gain unauthorized privileges, posing a risk to system security.
Recommendation
It is recommended to update HP-UX to the latest version to mitigate this vulnerability and to monitor user privileges.
Other vulnerabilities in HP-UX 10.20
See all- CVE-2000-0972Medium
HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target file during the crontab session, quitting the session, and reading the error messages that crontab generates.
- CVE-1999-0311High
fpkg2swpk in HP-UX allows local users to gain root access.
- CVE-1999-1239Medium
HP-UX 9.x does not properly enable the Xauthority mechanism in certain conditions, which could allow local users to access the X display even when they have not explicitly been authorized to do so.
Original NVD description (English source)
Certain programs in HP-UX 10.20 do not properly handle large user IDs (UID) or group IDs (GID) over 60000, which could allow local users to gain privileges.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS