Unscored CVE-1999-1139 EUVD-1999-1120GHSA-mxfh-mpgw-mj7f

Character-Terminal User Environment (CUE) in HP-UX 11.0 and earlier allows local users to overwrite arbitrary files and gain root privilege…

Published Mar 9, 2002 · Updated Aug 1, 2024 · Assigned by mitre

Description

Character-Terminal User Environment (CUE) in HP-UX 11.0 and earlier allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the IOERROR.mytty file.

References

HPSBUX9801-074 vendor-advisory
hp-cue(2007) vdb-entry
19980121 HP-UX CUE, CUD and LAND vulnerabilities mailing-list
19970901 HP UX Bug :) mailing-list
I-027B third-party-advisory government-resource