CVE-1999-1042: Low severity cisco resource manager vulnerability
Cisco Resource Manager (CRM) 1.0 and 1.1 creates world-readable log files and temporary files, which may expose sensitive information, to local users such as user IDs, passwords and SNMP community strings.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Cisco Resource Managerfrom your environment.If CRM is not required, uninstall or remove the product from affected hosts to eliminate the risk.
- Configuration
Change permissions on CRM-created log files and temporary files to remove world-readable bits (for example, chmod 600 or 640 and chown to the CRM service user). Ensure that any existing world-readable files created by CRM are updated to restrictive permissions.
Cisco Resource Manager (CRM) log and temporary file permissions = remove world-read (e.g., owner/group only, e.g., chmod 600 or 640); set ownership to CRM service account - Configuration
Configure the CRM service or its startup environment to use a restrictive umask (for example 027 or 077) so files and temporary files are not created as world-readable. Update service unit files or startup scripts accordingly.
Operating system / CRM process environment umask for CRM process / temp file creation = restrictive umask (e.g., 027 or 077) - Compensating control
Restrict local access to hosts running CRM to trusted administrative accounts only (limit interactive/logon access, tighten filesystem ACLs, and use host-based access controls) to reduce exposure to local users who could read world-readable files.
- Operational
Audit existing CRM log and temporary files for sensitive information (user IDs, passwords, SNMP community strings). If sensitive data is found, securely delete or rotate the exposed credentials (change passwords, revoke and reissue SNMP community strings) and purge the files from the system.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1042?
CVE-1999-1042 is considered a high severity vulnerability due to the potential exposure of sensitive information.
How do I fix CVE-1999-1042?
To fix CVE-1999-1042, restrict access to the log and temporary files to prevent unauthorized users from reading them.
What versions are affected by CVE-1999-1042?
CVE-1999-1042 affects Cisco Resource Manager versions 1.0 and 1.1.
What type of information is exposed by CVE-1999-1042?
CVE-1999-1042 can expose sensitive information such as user IDs, passwords, and SNMP community strings.
Are there any mitigating factors for CVE-1999-1042?
Mitigating factors for CVE-1999-1042 include proper user access controls and regularly auditing log file permissions.