CVE-1999-0327: Low severity SGI IRIX vulnerability
SGI syserr program allows local users to corrupt files.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
SGI/syserrfrom your environment.If syserr is not required, uninstall or remove the syserr program from affected SGI IRIX systems to eliminate the vulnerability.
- Configuration
Restrict execution of the syserr binary to privileged accounts only (for example, ensure ownership is root and remove execute permission for non-administrative users or enforce appropriate filesystem ACLs) to prevent local unprivileged users from running it.
SGI syserr execution/ownership permissions = restrict to administrative users only - Compensating control
If the binary cannot be removed or permissions cannot be changed immediately, restrict local user access to affected hosts (limit interactive logins, remove unnecessary local accounts, or apply host-based access controls) to reduce the risk of exploitation.
- Operational
Search for and investigate any signs of file corruption caused by local users; restore affected files from known-good backups and monitor for further suspicious activity until the issue is remediated.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0327?
CVE-1999-0327 is classified as a low to moderate severity vulnerability due to the limited access required and specific conditions for exploitation.
How do I fix CVE-1999-0327?
To fix CVE-1999-0327, users should upgrade to a more secure version of SGI IRIX that does not include this vulnerability.
Who is affected by CVE-1999-0327?
CVE-1999-0327 affects local users of SGI IRIX versions 5.3, 6.2, 6.3, and 6.4.
What type of files can be corrupted by CVE-1999-0327?
CVE-1999-0327 allows local users to corrupt various types of files on the affected SGI systems.
Is there a workaround for CVE-1999-0327?
Currently, the best workaround for CVE-1999-0327 is to restrict access to the syserr program or to remove it if not needed.