CVE-1999-0044: High severity SGI IRIX vulnerability
fsdump command in IRIX allows local users to obtain root access by modifying sensitive files.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
sgi/irix/fsdumpfrom your environment.Uninstall or remove the fsdump command if it is not required on the system.
- Configuration
Change ownership of the fsdump binary to root and set file permissions to prevent execution by non-privileged users (restrict execute access to privileged accounts only).
fsdump (SGI IRIX) binary ownership/permissions = restrict execution to root only - Compensating control
Limit which local accounts can run or access the fsdump binary — restrict interactive logins and use host-based access controls to ensure only trusted administrators can execute or modify fsdump and sensitive files.
- Operational
If exploitation is suspected, audit the system for unauthorized modifications to sensitive files, restore affected files from known-good backups, and rotate any credentials or keys that may have been exposed before applying fixes.