CVE-1999-0148: High severity SGI IRIX vulnerability
The handler CGI program in IRIX allows arbitrary command execution.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
SGI IRIX handler CGI programfrom your environment.Uninstall or remove the handler CGI program from affected IRIX systems if it is not required.
- Configuration
Disable the handler CGI program in the IRIX web server (remove/disable the CGI entry, remove execute permissions, or configure the server to not execute this handler) to prevent arbitrary command execution.
SGI IRIX handler CGI program enabled = false - Compensating control
Block or restrict access to the vulnerable handler at the network or host level (e.g., firewall, web application firewall, or web server ACLs) to prevent external access until the component can be fixed or removed.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0148?
CVE-1999-0148 is considered high severity due to the potential for arbitrary command execution.
Which versions of SGI IRIX are affected by CVE-1999-0148?
CVE-1999-0148 affects SGI IRIX versions 5.2, 5.3, 6.2, 6.3, and 6.4.
How do I fix CVE-1999-0148?
To fix CVE-1999-0148, it is recommended to apply available patches from SGI for the affected IRIX versions.
What type of vulnerability is CVE-1999-0148?
CVE-1999-0148 is a command execution vulnerability that allows an attacker to run arbitrary commands on the server.
Can CVE-1999-0148 be exploited remotely?
Yes, CVE-1999-0148 can be exploited remotely if the handler CGI program is exposed to the internet.