CVE-1999-1008: High severity Mandrakesoft Mandrake Linux vulnerability
xsoldier program allows local users to gain root access via a long argument.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
xsoldierfrom your environment.Uninstall or remove the xsoldier program from affected systems (FreeBSD and Mandrake Linux) if it is not required.
- Configuration
Change file permissions to prevent non-privileged users from running xsoldier (for example, restrict execution to root only: chmod 700 /path/to/xsoldier).
xsoldier executable execute permission = root-only - Compensating control
Restrict access to systems and accounts that can run xsoldier; limit local user logins and enforce least-privilege so untrusted users cannot execute the program.
- Operational
Monitor systems for evidence of local privilege escalation via xsoldier and apply vendor-supplied patches or advisories as soon as they become available.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1008?
CVE-1999-1008 is considered a critical vulnerability allowing local users to gain root access.
How do I fix CVE-1999-1008?
To mitigate CVE-1999-1008, you should upgrade to a patched version of the affected software.
Which systems are affected by CVE-1999-1008?
CVE-1999-1008 affects Mandrake Linux 7.0 and FreeBSD 3.3 systems.
What kind of access does CVE-1999-1008 provide to attackers?
CVE-1999-1008 enables local users to obtain root access through an exploit leveraging argument length.
Is CVE-1999-1008 a remote or local vulnerability?
CVE-1999-1008 is a local vulnerability that requires local user access to the affected system.