CVE-1999-0059: Infoleak
IRIX fam service allows an attacker to obtain a list of all files on the server.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
SGI IRIX fam servicefrom your environment.Uninstall or remove the fam service package/binaries from systems where the service is not required to eliminate the attack surface.
- Configuration
Disable/stop the fam (file alteration monitor) service on affected IRIX systems if it is not required. Stop the fam daemon and prevent it from starting at boot (disable its init entry or startup script).
SGI IRIX fam service enabled = false - Compensating control
Restrict access to the fam service to trusted hosts/networks using firewall rules or network ACLs; block or drop incoming connections to the service from untrusted networks.
- Operational
Monitor system logs for fam-related activity and unexpected file-listing requests, investigate suspicious access, and perform integrity checks on directories that may have been enumerated.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0059?
CVE-1999-0059 has a high severity rating due to its ability to expose sensitive file information on the server.
How do I fix CVE-1999-0059?
To mitigate CVE-1999-0059, disable the fam service or apply applicable patches provided by SGI for vulnerable IRIX versions.
What versions of IRIX are affected by CVE-1999-0059?
CVE-1999-0059 affects IRIX versions 5.3, 6.1, 6.2, and 6.3.
What is the impact of CVE-1999-0059 on server security?
CVE-1999-0059 allows attackers to list all files on the server, leading to potential data exposure and security breaches.
Is CVE-1999-0059 still relevant today?
While CVE-1999-0059 is an older vulnerability, it is still relevant for systems that are running unsupported versions of SGI IRIX.