CVE-1999-0126: Buffer Overflow
SGI IRIX buffer overflow in xterm and Xaw allows root access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
XFree86/xtermfrom your environment.Uninstall xterm from SGI IRIX systems if not required to mitigate the buffer overflow in xterm that allows local root access.
- Remove
Remove
XFree86/Xawfrom your environment.Uninstall the Xaw (X Athena Widgets) package from SGI IRIX systems if not required to mitigate the buffer overflow in Xaw that allows local root access.
- Compensating control
Until a patch or vendor fix is available, restrict access to affected systems and prevent untrusted users from executing xterm or Xaw (for example by removing execute permission, using local policy to block execution, or limiting access via host-based or network controls).
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0126?
CVE-1999-0126 is assigned a high severity level due to the potential for remote root access through a buffer overflow.
How do I fix CVE-1999-0126?
To fix CVE-1999-0126, you should upgrade to the latest version of XFree86 that includes a patch for the buffer overflow vulnerability.
What systems are affected by CVE-1999-0126?
CVE-1999-0126 affects systems running the XFree86 X Window System software.
What are the potential impacts of CVE-1999-0126?
The potential impacts of CVE-1999-0126 include unauthorized remote access and control of the affected system.
Who can exploit CVE-1999-0126?
CVE-1999-0126 can be exploited by an attacker with the ability to send specially crafted data to an xterm or Xaw session.