CVE-1999-0422: Medium severity NetBSD NetBSD vulnerability
In some cases, NetBSD 1.3.3 mount allows local users to execute programs in some file systems that have the "noexec" flag set.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Ensure filesystems that are mounted with the noexec flag are not writable by untrusted local users—make them owned and writable only by root and remove world/user write permissions from directories on those mounts.
filesystem mount write permissions = root-only writable - Compensating control
Restrict local unprivileged user access to affected filesystems (use filesystem ACLs, chroot/jail, or restrict mount privileges) so local users cannot place or execute programs on mounts that rely on noexec.
- Operational
Audit filesystems mounted with noexec for any executable binaries placed by local users and remove or relocate them; monitor for and investigate unexpected program execution originating from those mounts.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0422?
CVE-1999-0422 has a moderate severity level as it allows local users to execute programs in restricted file systems.
How do I fix CVE-1999-0422?
To fix CVE-1999-0422, users should consider upgrading to a newer version of NetBSD that addresses this vulnerability.
What impact does CVE-1999-0422 have on NetBSD 1.3.3?
The impact of CVE-1999-0422 allows local users to bypass the 'noexec' flag and execute arbitrary programs.
Which versions of NetBSD are affected by CVE-1999-0422?
CVE-1999-0422 specifically affects NetBSD version 1.3.3.
Is CVE-1999-0422 a local or remote vulnerability?
CVE-1999-0422 is a local vulnerability, allowing exploitation only by users with local access.