CVE-1999-0073
First published: Fri Oct 13 1995(Updated: )
Telnet allows a remote client to specify environment variables including LD_LIBRARY_PATH, allowing an attacker to bypass the normal system libraries and gain root access.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SGI IRIX | =5.0 | |
| SGI IRIX | =5.0.1 | |
| SGI IRIX | =5.1 | |
| SGI IRIX | =5.1.1 | |
| SGI IRIX | =5.2 | |
| SGI IRIX | =5.3 | |
| SGI IRIX | =5.3 | |
| SGI IRIX | =6.0 | |
| SGI IRIX | =6.0.1 | |
| SGI IRIX | =6.0.1 | |
| SGI IRIX | =6.1 | |
| SGI IRIX | =6.2 | |
| SGI IRIX | =6.3 | |
| OSF Digital | =1.2 | |
| OSF Digital | =1.3 | |
| OSF Digital | =2.0 | |
| OSF Digital | =3.0 | |
| OSF Digital | =3.2 | |
| Digital OpenVMS | =3.2g | |
| Digital OpenVMS | =4.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-1999-0073?
CVE-1999-0073 is considered to have a high severity due to the potential for remote root access exploitation.
How do I fix CVE-1999-0073?
To fix CVE-1999-0073, upgrade to a patched version of SGI IRIX or Digital OSF/1 that does not allow environment variable manipulation.
What types of systems are affected by CVE-1999-0073?
CVE-1999-0073 affects various versions of SGI IRIX and Digital OSF/1 systems.
What is the impact of exploiting CVE-1999-0073?
Exploiting CVE-1999-0073 allows an attacker to change environment variables, which can lead to arbitrary code execution with root privileges.
Is there a workaround for CVE-1999-0073?
A potential workaround for CVE-1999-0073 is to disable Telnet service and use more secure alternatives for remote access.
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/references
- agent/description
- agent/last-modified-date
- agent/author
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- vendor/sgi
- canonical/sgi irix
- version/sgi irix/5.0
- version/sgi irix/5.0.1
- version/sgi irix/5.1
- version/sgi irix/5.1.1
- version/sgi irix/5.2
- version/sgi irix/5.3
- version/sgi irix/6.0
- version/sgi irix/6.0.1
- version/sgi irix/6.1
- version/sgi irix/6.2
- version/sgi irix/6.3
- vendor/digital
- canonical/osf digital
- version/osf digital/1.2
- version/osf digital/1.3
- version/osf digital/2.0
- version/osf digital/3.0
- version/osf digital/3.2
- canonical/digital openvms
- version/digital openvms/3.2g
- version/digital openvms/4.0