CVE-1999-0462: High severity SUSE SuSE Linux vulnerability
suidperl in Linux Perl does not check the nosuid mount option on file systems, allowing local users to gain root access by placing a setuid script in a mountable file system, e.g. a CD-ROM or floppy disk.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
suidperlfrom your environment.Uninstall or remove the suidperl component (or the package providing it) if it is not required, to eliminate the vulnerable setuid Perl interpreter.
- Configuration
Remove the setuid bit from the suidperl executable to prevent setuid Perl scripts from running with elevated privileges (e.g., run chmod u-s on the suidperl binary).
suidperl setuid = disabled - Compensating control
Prevent untrusted users from mounting removable media and restrict mounting of CDs/floppies/USBs to trusted administrators (disable user mounts) to reduce the risk of local users placing setuid scripts on mountable filesystems.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0462?
CVE-1999-0462 is considered to be a high severity vulnerability due to its potential to allow local users to gain root access.
How do I fix CVE-1999-0462?
To mitigate CVE-1999-0462, ensure that the nosuid mount option is enabled for any file systems where untrusted users can write files.
What systems are affected by CVE-1999-0462?
CVE-1999-0462 specifically affects SUSE Linux version 5.3, where suidperl does not check the nosuid mount option.
What are the risks associated with CVE-1999-0462?
The main risk of CVE-1999-0462 is that local users can exploit the vulnerability to execute setuid scripts, potentially gaining unauthorized root access.
Is CVE-1999-0462 still relevant today?
While CVE-1999-0462 is an older vulnerability, it is still relevant for legacy systems running unsupported versions of SUSE Linux.