CVE-1999-0312

CVSS 2.0 Score 5.0 of 10 (medium)

Details

Published Jan 13, 1993
Updated: Nov 20, 2024

Summary

CVE-1999-0312 is a vulnerability affecting HP ypbind, a Name Service Switch daemon. This issue permits attackers with root privileges to manipulate NIS (Network Information Service) data. Malicious actors can exploit this vulnerability to modify essential system information, potentially leading to serious system compromise or denial of service conditions. By exploiting this security weakness, an attacker could disrupt services or gain unauthorized access to sensitive data. HP released a patch to address this vulnerability, and system administrators are strongly encouraged to apply it.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • HP-UX
  • HP-UX family of operating systems
  • HP-UX 11.11

Affected Vendors

  • HP