CVE-1999-0836: Critical severity SCO UnixWare vulnerability
UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Xinuos UnixWare uidadminfrom your environment.Uninstall or remove the uidadmin program if it is not required on the system to eliminate the vulnerable component.
- Configuration
Change ownership and permissions on the uidadmin binary so only trusted administrative accounts can execute it (e.g., restrict execute permission to root/administrators) to prevent local users from exploiting the symlink vulnerability.
UnixWare uidadmin binary file_permissions = restrict execution to administrators
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0836?
CVE-1999-0836 is considered a medium severity vulnerability due to its potential for local users to exploit file permissions.
How do I fix CVE-1999-0836?
To fix CVE-1999-0836, ensure that proper file permissions and ownership are enforced to prevent unauthorized symlink creation.
Which versions of UnixWare are affected by CVE-1999-0836?
CVE-1999-0836 affects UnixWare versions 7.0, 7.0.1, 7.1, and 7.1.1.
Is CVE-1999-0836 a remote or local vulnerability?
CVE-1999-0836 is a local vulnerability that can only be exploited by users with local access to the system.
What type of attack does CVE-1999-0836 involve?
CVE-1999-0836 involves a symlink attack that allows local users to modify arbitrary files.