CVE-2001-1198: RLPDaemon in HP-UX 10.20 and 11.0 allows local users to overwrite arbitrary files and gain privileges by sp...

Security readout for executives and security teams

This is a legacy HP-UX local privilege escalation issue. A local user could misuse RLPDaemon logging behavior to overwrite files chosen by the attacker, potentially gaining elevated privileges. It matters mainly where HP-UX 10.20 or 11.0 systems still exist and allow local user access. Exposure is likely limited to legacy HP-UX 10.20 and 11.0 hosts with RLPDaemon/rlpdaemon present, especially where local users or shared shell access exist. Prioritize this if legacy HP-UX systems remain in production or support critical operations. The issue is old, but local privilege escalation on unsupported infrastructure can become serious when paired with weak account controls or remote access. Mitigation focus: Check HP or HPE guidance for the applicable HP-UX patch or workaround.; Disable RLPDaemon where business use is not required.; Restrict local shell access to trusted administrators only..

Prepared

Jul 1, 2026, 07:29 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.