CVE-1999-0035: Race Condition
Race condition in signal handling routine in ftpd, allowing read/write arbitrary files.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
SGI IRIX inet ftpdfrom your environment.Uninstall ftpd from affected SGI IRIX systems if it is not required.
- Configuration
Disable or stop the ftpd daemon/service on affected systems until a vendor fix is available.
ftpd enabled = false - Compensating control
Block or restrict access to FTP (TCP port 21) at the network perimeter; restrict FTP access to trusted management hosts only via firewall/ACLs.
- Operational
Audit systems for unauthorized file reads/writes and signs of compromise (check file integrity, modification times, and FTP logs); restore affected files from known-good backups where necessary and monitor for further suspicious FTP activity.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0035?
CVE-1999-0035 has a high severity rating due to its ability to allow arbitrary file read/write operations.
How do I fix CVE-1999-0035?
To fix CVE-1999-0035, upgrade to a patched version of the affected software such as inet 5.01 or later.
What does CVE-1999-0035 exploit?
CVE-1999-0035 exploits a race condition in the signal handling routine of the ftpd server.
Which systems are affected by CVE-1999-0035?
CVE-1999-0035 affects systems running GNU Inet version 5.01 and SGI IRIX operating systems.
What can an attacker achieve with CVE-1999-0035?
An attacker can exploit CVE-1999-0035 to read or write arbitrary files on a compromised system.