CVE-1999-0408: Critical severity Sun Cobalt Raq vulnerability
Files created from interactive shell sessions in Cobalt RaQ microservers (e.g. .bashhistory) are world readable, and thus are accessible from the web server.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Sun Cobalt RaQ interactive shell history files (.bash_history and similar)from your environment.Remove/delete any world-readable interactive-shell history files from web-accessible locations if they are not required.
- Configuration
Change permissions on existing and future shell history files to remove world-read access. For existing files, run a permission change such as `chmod 600 /path/to/.bash_history`. Ensure new history files are created with restrictive permissions (for example by using a restrictive umask or shell configuration).
Sun Cobalt RaQ interactive shell history files (e.g., .bash_history) file_permissions = remove world-readable bit (e.g., chmod 600) - Configuration
Configure the RaQ web server to deny access to dotfiles (files beginning with a '.') so that .bash_history and other hidden files are not served over HTTP.
web server serve_dotfiles = disabled - Operational
Inspect any exposed history files for sensitive data and rotate any credentials, keys, or secrets discovered to prevent misuse.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0408?
CVE-1999-0408 is considered a high severity vulnerability due to the exposure of sensitive command history files.
How do I fix CVE-1999-0408?
To fix CVE-1999-0408, configure appropriate permissions on files like .bash_history to restrict access.
What systems are affected by CVE-1999-0408?
CVE-1999-0408 affects Cobalt RaQ microservers including versions of Sun's Cobalt RaQ.
What kind of information can be exposed through CVE-1999-0408?
CVE-1999-0408 can expose sensitive command history, potentially revealing user credentials and system commands.
Is CVE-1999-0408 still relevant today?
While CVE-1999-0408 is an older vulnerability, it remains relevant for systems still using vulnerable versions of Cobalt RaQ.