CVE-1999-0117: High severity IBM AIX vulnerability
AIX passwd allows local users to gain root access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Isolate affected IBM AIX hosts and restrict local logins: prevent untrusted/local user accounts from accessing vulnerable systems and apply network-level restrictions (firewall/ACLs) to limit access until a vendor fix is available.
- Operational
Audit authentication and privilege escalation logs on AIX systems for evidence of unauthorized root access. If compromise is suspected, rotate exposed credentials and rebuild or restore affected systems from trusted backups.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0117?
CVE-1999-0117 is considered critical due to its potential to allow local users to gain root access.
How do I fix CVE-1999-0117?
To fix CVE-1999-0117, you should update your IBM AIX system to a version that is not affected by this vulnerability.
Which versions of AIX are affected by CVE-1999-0117?
CVE-1999-0117 affects IBM AIX versions 3.1 and 3.2.
Who is at risk from CVE-1999-0117?
Local users on systems running vulnerable versions of IBM AIX are at risk from CVE-1999-0117.
What is the impact of CVE-1999-0117?
The primary impact of CVE-1999-0117 is unauthorized root access to the system, leading to potential data breaches or system compromise.