CVE-1999-0413: Buffer Overflow
A buffer overflow in the SGI X server allows local users to gain root access through the X server font path.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
SGI X serverfrom your environment.If graphical functionality is not required, uninstall or disable the SGI X server to eliminate the vulnerable component.
- Configuration
Remove any untrusted or user-writable entries from the X server font path and restrict the font path to trusted, read-only system directories.
SGI X server font path = remove or restrict untrusted entries - Compensating control
Restrict local access to the X server and limit which local accounts can start or connect to the display (for example, via file permissions, host-based access controls, or local firewall rules) to reduce the risk of local users exploiting the font-path vulnerability.
- Operational
Monitor systems for signs of local privilege escalation and apply any vendor-supplied patches or updates for SGI IRIX / the SGI X server as soon as they become available.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0413?
CVE-1999-0413 has a high severity rating due to the potential for local users to gain root access.
How do I fix CVE-1999-0413?
To fix CVE-1999-0413, you should apply the latest patches and updates provided by SGI for your IRIX version.
Which versions of SGI IRIX are affected by CVE-1999-0413?
CVE-1999-0413 affects SGI IRIX versions 5.3, 6.2, 6.3, 6.4, and 6.5.
What type of vulnerability is CVE-1999-0413?
CVE-1999-0413 is a buffer overflow vulnerability that affects the SGI X server.
Can CVE-1999-0413 be exploited remotely?
No, CVE-1999-0413 can only be exploited by local users with access to the SGI X server.