CVE-1999-0124: Critical severity University of Minnesota gopherd vulnerability
Vulnerabilities in UMN gopher and gopher+ versions 1.12 and 2.0x allow an intruder to read any files that can be accessed by the gopher daemon.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
University of Minnesota Gopherfrom your environment.Uninstall or disable the UMN Gopher (gopher / gopher+) service if it is not required. Versions 1.12 and 2.0x are vulnerable and may allow arbitrary file reads.
- Compensating control
Restrict network access to the gopher service (e.g., firewall rules, ACLs) to trusted hosts or block external access entirely until a vendor-provided fix or safe upgrade is available.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0124?
The severity of CVE-1999-0124 is considered to be high due to the potential for unauthorized file access.
How do I fix CVE-1999-0124?
To fix CVE-1999-0124, you should upgrade to a patched version of the UMN gopher or gopher+ application.
What systems are impacted by CVE-1999-0124?
CVE-1999-0124 affects UMN gopher and gopher+ versions 1.12 and 2.0x.
Can CVE-1999-0124 lead to data breaches?
Yes, CVE-1999-0124 can lead to data breaches as it allows intruders to read any accessible files on the system.
Are there any known exploits for CVE-1999-0124?
Yes, there are known exploits for CVE-1999-0124 that can leverage the file reading vulnerability.