CVE-1999-1139

CVSS 2.0 Score 7.2 of 10 (high)

Details

Published Sep 1, 1997
Updated: Nov 20, 2024

Summary

CVE-1999-1139 is a vulnerability affecting the Character-Terminal User Environment (CUE) in HP-UX 11.0 and earlier versions. Hackers can exploit this issue by creating a symbolic link to the IOERROR.mytty file, allowing them to overwrite arbitrary files and ultimately gain root privileges. This vulnerability poses a significant risk, as local users can exploit it without requiring network access or sophisticated hacking tools. HP-UX systems running CUE prior to version 11.1 should be patched immediately to mitigate this threat.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • HP-UX
  • HP-UX family of operating systems

Affected Vendors

  • HP