Is CVE-1999-0309 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-1999-0309 being exploited in the wild.

How severe is CVE-1999-0309?

High severity, with a CVSS score of 7.2, published 1 February 1997.

Is there a fix for CVE-1999-0309?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-1999-0309 attacked?

It is attacked with local access, in an operating system.

Am I affected by CVE-1999-0309?

Check whether you run Hp-Ux. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-1999-0309: HP HP-UX privilege escalation in vgdisplay

CVE-1999-0309 · Severity: high · CVSS 7.2 · Published 1997-02-01

A vulnerability in the HP-UX operating system allows standard users to gain full administrative control over the server. By exploiting a flaw in the vgdisplay utility, which is used to manage disk storage, a local attacker can bypass security restrictions to access sensitive data or disrupt operations. This could lead to a complete compromise of the affected system's integrity and confidentiality.

Technologies: Hp-Ux. Vendors: Hp.

Quick answers

Is CVE-1999-0309 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-1999-0309 being exploited in the wild.
How severe is CVE-1999-0309?: High severity, with a CVSS score of 7.2, published 1 February 1997.
Which products and versions are affected?: HP HP-UX.
Is there a fix for CVE-1999-0309?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-1999-0309 attacked?: It is attacked with local access, in an operating system.
Am I affected by CVE-1999-0309?: Check whether you run Hp-Ux. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A privilege escalation vulnerability exists in the HP-UX 'vgdisplay' utility, a component of the Logical Volume Manager (LVM). The flaw allows a local, unprivileged user to execute commands or manipulate system files with root-level permissions. While the specific mechanism (such as a buffer overflow or insecure environment variable handling) is not detailed in the legacy advisory, the impact is a full compromise of the local host. This issue affects older versions of the HP-UX operating system and was addressed in HP security advisory HPSBUX9702-056.

Affected products

HP HP-UX

Timeline

1997-02-01: disclosed: Initial publication of the vulnerability.
1997-02-01: advisory: HP released advisory HPSBUX9702-056.

References

http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9702-056

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.