CVE-1999-1308 Integer overflow in n/a

Medium 4.6 Published 12 Sep 2001 Updated 1 Aug 2024

Local attackers can exploit improper handling of large user or group IDs to gain elevated privileges on HP-UX systems.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-1999-1308?

CVE-1999-1308 is a medium-severity vulnerability in Hp Hp-Ux, published on 12 Sep 2001. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Certain programs in HP-UX 10.20 do not properly handle large user IDs (UID) or group IDs (GID) over 60000, which could allow local users to gain privileges.

Which versions are affected by CVE-1999-1308?

It affects 1 product.

Products include Hp Hp-Ux.

How do I fix CVE-1999-1308?

No fix has been published for CVE-1999-1308 yet. Limit exposure of the affected software until one is available.

Is CVE-1999-1308 being exploited?

There is no known exploitation of CVE-1999-1308 in the wild and no public exploit code.

All Hp Hp-Ux vulnerabilities

Sources

Also known as GHSA-6h2j-2p74-3pmh.