CVE-1999-0022: Buffer Overflow
Local user gains root privileges via buffer overflow in rdist, via expstr() function.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
rdistfrom your environment.Uninstall rdist from affected systems if it is not required, to eliminate the vulnerable expstr() code path that allows local privilege escalation.
- Compensating control
Prevent untrusted local users from executing rdist by restricting file permissions and access to the binary (only allow trusted administrators). If rdist is present with elevated privileges, remove/disable those privileges or otherwise isolate the binary until a vendor fix is available.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0022?
CVE-1999-0022 is classified as a high severity vulnerability due to its ability to allow local users to gain root privileges.
How do I fix CVE-1999-0022?
To fix CVE-1999-0022, ensure that you apply the appropriate patches provided by the software vendor for the affected SGI IRIX and other operating system versions.
What systems are affected by CVE-1999-0022?
CVE-1999-0022 affects various versions of SGI IRIX, BSDI, FreeBSD, HP-UX, IBM AIX, and Sun Solaris.
Who is impacted by CVE-1999-0022?
Local users on systems with vulnerable versions of the affected operating systems can exploit CVE-1999-0022 to gain unauthorized root access.
How does CVE-1999-0022 exploit work?
CVE-1999-0022 exploits a buffer overflow in the rdist program's expstr() function, allowing attackers to manipulate memory and escalate their privileges.