CVE-1999-0328: High severity SGI IRIX vulnerability
SGI permissions program allows local users to gain root privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
SGI IRIX permissions programfrom your environment.If the permissions program is not required, uninstall or disable the SGI IRIX permissions program to eliminate the local privilege-escalation vector.
- Compensating control
Restrict local interactive access (console, SSH, direct logins) to trusted administrative accounts only; lock or remove unnecessary local user accounts and enforce least-privilege for local users.
- Operational
Audit systems for signs of unauthorized root access, review logs for privilege-escalation activity, rotate credentials for administrative accounts, and restore affected systems from known-good backups if compromise is suspected.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0328?
CVE-1999-0328 is rated as a high severity vulnerability due to its ability to allow local users to gain root privileges.
How do I fix CVE-1999-0328?
To fix CVE-1999-0328, users should apply the security patches provided by SGI for their specific version of IRIX.
What systems are affected by CVE-1999-0328?
CVE-1999-0328 affects multiple versions of SGI IRIX, including 5.0.1, 5.1, 5.1.1, 5.2, 5.3, and 6.0 through 6.4.
Can CVE-1999-0328 be exploited remotely?
CVE-1999-0328 cannot be exploited remotely, as it requires local access to the affected system.
What risks are associated with CVE-1999-0328?
The risks associated with CVE-1999-0328 include unauthorized access and control over the affected SGI IRIX system by a local user.