CVE-1999-0314: High severity SGI IRIX vulnerability
ioconfig on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
ioconfig (SGI IRIX 6.4 S2MP for Origin/Onyx2)from your environment.Uninstall or disable the ioconfig utility on affected SGI IRIX 6.4 S2MP Origin/Onyx2 systems if it is not required to remove the local privilege escalation vector.
- Compensating control
Prevent untrusted local users from executing ioconfig and restrict local account access (limit/disable unneeded local accounts, restrict shell access). Ensure privileged users' PATH and execution environment do not allow execution via relative pathnames or writable directories.
- Operational
Audit systems for signs of local privilege escalation via ioconfig. If compromise is suspected, rotate credentials for affected administrative/root accounts and rebuild or remediate impacted systems.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0314?
CVE-1999-0314 has a high severity rating due to its potential to allow local users to gain root access.
How do I fix CVE-1999-0314?
To fix CVE-1999-0314, remove the ioconfig utility or restrict access to it by modifying file permissions.
Who is affected by CVE-1999-0314?
CVE-1999-0314 affects local users on SGI IRIX 6.4 systems for Origin and Onyx2.
What exploitation methods are used in CVE-1999-0314?
Exploitation of CVE-1999-0314 involves using relative pathnames to elevate privileges.
Is CVE-1999-0314 still a concern today?
While CVE-1999-0314 is an older vulnerability, systems still running IRIX 6.4 can still be at risk if not properly mitigated.