CVE-1999-0765: Critical severity SGI IRIX vulnerability
SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
SGI IRIX midikeysfrom your environment.Uninstall or remove the midikeys program from affected SGI IRIX systems if it is not required.
- Configuration
Prevent unprivileged local users from running midikeys (remove execute permissions for non-root users or change ownership so only root can execute the program).
SGI IRIX midikeys executable_by_nonprivileged_users = false - Compensating control
Restrict local account access on affected systems: disable or remove untrusted local user accounts and limit interactive logins to trusted administrators until the vulnerability is mitigated.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0765?
CVE-1999-0765 has been classified with a severity rating of medium, indicating a potential risk for local users.
How do I fix CVE-1999-0765?
To fix CVE-1999-0765, it is recommended to restrict access to the midikeys program and ensure that only authorized users can execute it.
Who is affected by CVE-1999-0765?
CVE-1999-0765 affects users of SGI IRIX version 6.0, allowing local users to modify arbitrary files.
What causes the vulnerability in CVE-1999-0765?
The vulnerability in CVE-1999-0765 is caused by insufficient input validation in the midikeys program, permitting local users to exploit it.
Is CVE-1999-0765 remote exploit possible?
No, CVE-1999-0765 is a local vulnerability and cannot be exploited remotely.