CVE-1999-0011 [Medium] | Denial of Service in Dg Ux

CVE-1999-0011 is rated Moderate Risk (56.3/100): CVSS Medium severity, with high exploitation likelihood (EPSS 10.98%, 93th percentile). EPSS ranks this CVE among the most likely to be exploited in the near term. EPSS rose +2.18% over the last day, indicating growing attacker interest. High exploitation likelihood—assess exposure and prioritize remediation.

#	Date	Old EPSS score	New EPSS score	Delta (New - Old)
1	2025-04-10	8.79%	10.98%	+2.18%
2	2025-03-30	41.78%	8.79%	-32.99%
3	2025-03-29	—	41.78%	—

Date

Old EPSS score

New EPSS score

Delta (New - Old)

2025-04-10

8.79%

10.98%

+2.18%

2025-03-30

41.78%

8.79%

-32.99%

2025-03-29

—

41.78%

—

Base score	Version	Severity	Vector	Exploitability	Impact	Score source
5.4	3.1	MEDIUM	`CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L` Click to expand Attack vector (AV:A) Attacker has to be nearby on the network—same office, same link, that vibe—not the whole wide internet. Attack complexity (AC:L) Once they can reach the bug, pulling it off is straightforward—no weird race conditions or rare setup. Privileges required (PR:N) No account or special rights needed—anonymous or random user is enough. User interaction (UI:N) Nobody has to click “OK” or open a trap file; it can work without a victim helping. Scope (S:U) Damage stays in the same “trust bubble” as the broken component—no big spill into unrelated systems. Confidentiality (C:L) Some sensitive info could get out, but not a total data dump. Integrity (I:N) Data isn’t meaningfully altered or forged. Availability (A:L) Might cause slowdowns, glitches, or partial disruption—not a full brick.	2.8	2.5	134c704f-9b21-4f2e-91b3-4a467353bcc0
10.0	2.0	HIGH	`AV:N/AC:L/Au:N/C:C/I:C/A:C` Click to expand Access vector (AV:N) Can be exploited remotely over network reachability. Access complexity (AC:L) Exploitation conditions are straightforward and predictable. Authentication (AU:N) No authentication is required. Confidentiality impact (C:C) Complete confidentiality impact. Integrity impact (I:C) Complete integrity impact. Availability impact (A:C) Complete availability impact.	10.0	10.0	[email protected]

Base score

Version

Severity

Vector

Exploitability

Impact

Score source

5.4

3.1

MEDIUM

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L Click to expand

Attack vector (AV:A): Attacker has to be nearby on the network—same office, same link, that vibe—not the whole wide internet.
Attack complexity (AC:L): Once they can reach the bug, pulling it off is straightforward—no weird race conditions or rare setup.
Privileges required (PR:N): No account or special rights needed—anonymous or random user is enough.
User interaction (UI:N): Nobody has to click “OK” or open a trap file; it can work without a victim helping.
Scope (S:U): Damage stays in the same “trust bubble” as the broken component—no big spill into unrelated systems.
Confidentiality (C:L): Some sensitive info could get out, but not a total data dump.
Integrity (I:N): Data isn’t meaningfully altered or forged.
Availability (A:L): Might cause slowdowns, glitches, or partial disruption—not a full brick.

2.8

2.5

134c704f-9b21-4f2e-91b3-4a467353bcc0

10.0

2.0

HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C Click to expand

Access vector (AV:N): Can be exploited remotely over network reachability.
Access complexity (AC:L): Exploitation conditions are straightforward and predictable.
Authentication (AU:N): No authentication is required.
Confidentiality impact (C:C): Complete confidentiality impact.
Integrity impact (I:C): Complete integrity impact.
Availability impact (A:C): Complete availability impact.

10.0

[email protected]

OS Trackers for CVE-1999-0011

vendor	priority	summary	link
`alpine`	—	CVE-1999-0011: no source package rows; 0 state rows across 0 repos (none); fixed 0, open 0.	https://security.alpinelinux.org/vuln/CVE-1999-0011

Affected software / configurations for CVE-1999-0011

Vendor	Product	Version	Raw CPE
data_general	dg_ux	y2k_patchr4.11mu05	cpe:2.3:a:data_general:dg_ux:y2k_patchr4.11mu05:::::::*
data_general	dg_ux	y2k_patchr4.12mu03	cpe:2.3:a:data_general:dg_ux:y2k_patchr4.12mu03:::::::*
data_general	dg_ux	y2k_patchr4.20mu01	cpe:2.3:a:data_general:dg_ux:y2k_patchr4.20mu01:::::::*
data_general	dg_ux	y2k_patchr4.20mu02	cpe:2.3:a:data_general:dg_ux:y2k_patchr4.20mu02:::::::*
data_general	dg_ux	y2k_patchr4.20mu03	cpe:2.3:a:data_general:dg_ux:y2k_patchr4.20mu03:::::::*
isc	bind	4.9	cpe:2.3:a:isc:bind:4.9:::::::*
isc	bind	8	cpe:2.3:a:isc:bind:8:::::::*
ibm	aix	4.1	cpe:2.3:o:ibm:aix:4.1:::::::*
ibm	aix	4.2	cpe:2.3:o:ibm:aix:4.2:::::::*
ibm	aix	4.3	cpe:2.3:o:ibm:aix:4.3:::::::*
nec	asl_ux_4800	11	cpe:2.3:o:nec:asl_ux_4800:11:::::::*
nec	asl_ux_4800	13	cpe:2.3:o:nec:asl_ux_4800:13:::::::*
netbsd	netbsd	1.3	cpe:2.3:o:netbsd:netbsd:1.3:::::::*
netbsd	netbsd	1.3.1	cpe:2.3:o:netbsd:netbsd:1.3.1:::::::*
redhat	linux	4.2	cpe:2.3:o:redhat:linux:4.2:::::::*
redhat	linux	5.0	cpe:2.3:o:redhat:linux:5.0:::::::*
sco	open_desktop	3.0	cpe:2.3:o:sco:open_desktop:3.0:::::::*
sco	openserver	5.0	cpe:2.3:o:sco:openserver:5.0:::::::*
sco	unix	3.2v4	cpe:2.3:o:sco:unix:3.2v4:::::::*
sco	unixware	2.1	cpe:2.3:o:sco:unixware:2.1:::::::*
sco	unixware	7.0	cpe:2.3:o:sco:unixware:7.0:::::::*
sun	sunos	5.3	cpe:2.3:o:sun:sunos:5.3:::::::*
sun	sunos	5.4	cpe:2.3:o:sun:sunos:5.4:::::::*
sun	sunos	5.5	cpe:2.3:o:sun:sunos:5.5:::::::*
sun	sunos	5.5.1	cpe:2.3:o:sun:sunos:5.5.1:::::::*
sun	sunos	5.6	cpe:2.3:o:sun:sunos:5.6:::::::*

References for CVE-1999-0011

URL	Tags
ftp://patches.sgi.com/support/free/security/advisories/19980603-01-PX
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/180
http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9808-083

URL

CVE-1999-0011

Exploit prediction scoring system (EPSS) score for CVE-1999-0011

Common vulnerability scoring system (CVSS) metrics for CVE-1999-0011

Weakness enumeration for CVE-1999-0011

OS Trackers for CVE-1999-0011

Affected software / configurations for CVE-1999-0011

References for CVE-1999-0011