CVE-1999-1040: High severity SGI IRIX vulnerability
Vulnerabilities in (1) ipxchk and (2) ipxlink in NetWare Client 1.0 on IRIX 6.3 and 6.4 allows local users to gain root access via a modified IFS environmental variable.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
NetWare Client 1.0 (ipxchk, ipxlink) on IRIX 6.3/6.4from your environment.Uninstall the NetWare Client 1.0 package or remove the ipxchk and ipxlink binaries from IRIX 6.3 and 6.4 systems if the NetWare client functionality is not required.
- Configuration
Remove the setuid root permission from the ipxchk and ipxlink binaries to prevent local users from gaining root (for example: chmod u-s /path/to/ipxchk /path/to/ipxlink).
ipxchk and ipxlink (NetWare Client 1.0) setuid bit = removed - Compensating control
Restrict local interactive access to IRIX systems with the vulnerable NetWare Client installed (limit logins to trusted accounts), and use filesystem ACLs or sudo rules to prevent untrusted users from executing ipxchk and ipxlink until a vendor fix is available.
- Operational
Assume possible local-root compromise where the vulnerable binaries were present: audit system logs for unauthorized activity, investigate for signs of compromise, and rotate root/administrative credentials and keys before restoring or reinstalling the software.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1040?
CVE-1999-1040 is classified as a local privilege escalation vulnerability.
How do I fix CVE-1999-1040?
To fix CVE-1999-1040, upgrade to a patched version of the NetWare Client for SGI IRIX that addresses this vulnerability.
What systems are affected by CVE-1999-1040?
CVE-1999-1040 affects NetWare Client 1.0 on SGI IRIX versions 6.3 and 6.4.
What can an attacker achieve using CVE-1999-1040?
An attacker can gain root access on the affected systems by exploiting CVE-1999-1040.
Is CVE-1999-1040 still a threat today?
While CVE-1999-1040 is an older vulnerability, systems running the affected versions of SGI IRIX may still be at risk if not updated.