CVE-1999-0754: Critical severity ISC inn vulnerability
The INN inndstart program allows local users to gain privileges by specifying an alternate configuration file using the INNCONF environmental variable.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Ensure inndstart is invoked with the INNCONF environment variable unset or that the program is configured/wrapped to ignore INNCONF. Modify service startup scripts or wrappers to explicitly unset INNCONF before launching inndstart.
INN inndstart INNCONF environment variable = unset / ignored - Compensating control
Restrict which local accounts can execute the inndstart binary and tighten filesystem permissions so unprivileged local users cannot run or replace inndstart or the configuration files it might use.
- Operational
Audit startup scripts, service wrappers, and any administrative procedures for use of INNCONF; remove or sanitize any usage and verify that untrusted users cannot modify files referenced via INNCONF.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0754?
CVE-1999-0754 has a severity rating that indicates a medium risk due to the potential for local privilege escalation.
How do I fix CVE-1999-0754?
To fix CVE-1999-0754, ensure that the INN configuration file permissions are properly set and restrict the use of the INNCONF environmental variable.
Who is affected by CVE-1999-0754?
Users of ISC INN software versions that allow local configuration file manipulation are affected by CVE-1999-0754.
What is the exploitation process for CVE-1999-0754?
An attacker would exploit CVE-1999-0754 by specifying an alternate configuration file through the INNCONF environment variable to gain elevated privileges.
Is there a patch available for CVE-1999-0754?
Yes, a patch is available in later versions of ISC INN that resolves the vulnerability associated with CVE-1999-0754.