CVE-1999-1573

Vulnerability

Multiple unknown security defects exist in the HP-UX remote network commands (r-cmnds) included in the InternetSrvcs.INETSVCS-RUN fileset. The affected commands are remshd(1M), rexecd(1M), rlogind(1M), rlogin(1), remsh(1), rcp(1), rexec(1), and rdist(1). These vulnerabilities affect HP-UX versions 10.00 through 11.00. The exact nature of the flaws is not publicly disclosed, but they allow unauthorized access to files or privilege escalation [1].

Exploitation

An attacker can exploit these vulnerabilities remotely over the network. No authentication is required, as the r-cmnds are designed to provide remote access services. The specific exploitation steps are not detailed in the available references, but the flaws can be triggered by sending crafted requests to the vulnerable services [1].

Impact

Successful exploitation allows an attacker to gain increased privileges on the system or access files that would normally be restricted. This compromises both confidentiality and integrity of the affected HP-UX systems [1].

Mitigation

HP released cumulative patches to address these defects. For HP-UX 10.00, 10.01, and 10.10, install patch PHNE_13618. For HP-UX 10.20 and 10.30, install PHNE_13619. For HP-UX 11.00, install PHNE_16091. The HP VirtualVault product (HP-UX 10.24) is not affected. No workarounds are documented; applying the appropriate patch is the recommended solution [1].