CVE-1999-0073: Critical severity SGI IRIX vulnerability
Telnet allows a remote client to specify environment variables including LDLIBRARYPATH, allowing an attacker to bypass the normal system libraries and gain root access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
telnetfrom your environment.Uninstall the telnet client/server or disable the telnet service to prevent remote clients from specifying environment variables.
- Configuration
Configure the telnet server to not accept environment variables (such as LD_LIBRARY_PATH) from remote clients; if a specific option exists, disable environment-variable passing.
telnet accept_remote_environment_variables = false - Compensating control
Restrict access to the telnet service at the network perimeter (firewall/ACL) to trusted management hosts/IPs only, and replace telnet with an encrypted alternative (e.g., SSH) where possible.
- Operational
If compromise is suspected, isolate affected systems, perform forensic investigation and recovery (rebuild from trusted backups), and rotate any credentials or keys that may have been exposed.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0073?
CVE-1999-0073 is considered to have a high severity due to the potential for remote root access exploitation.
How do I fix CVE-1999-0073?
To fix CVE-1999-0073, upgrade to a patched version of SGI IRIX or Digital OSF/1 that does not allow environment variable manipulation.
What types of systems are affected by CVE-1999-0073?
CVE-1999-0073 affects various versions of SGI IRIX and Digital OSF/1 systems.
What is the impact of exploiting CVE-1999-0073?
Exploiting CVE-1999-0073 allows an attacker to change environment variables, which can lead to arbitrary code execution with root privileges.
Is there a workaround for CVE-1999-0073?
A potential workaround for CVE-1999-0073 is to disable Telnet service and use more secure alternatives for remote access.