CVE-1999-1079: Medium severity IBM AIX vulnerability
Published May 6, 1999
·Updated
Vulnerability in ptrace in AIX 4.3 allows local users to gain privileges by attaching to a setgid program.
Affected Software
11 affected components
IBM AIX=3.2.5
IBM AIX=4.1
IBM AIX=4.1.1
IBM AIX=4.1.2
IBM AIX=4.1.3
IBM AIX=4.1.4
IBM AIX=4.1.5
IBM AIX=4.2
IBM AIX=4.2.1
IBM AIX=4.3
IBM AIX=4.3.2
Remediation
Patch Available
Event History
May 6, 1999
CVE Published
04:00 AM
Data Sourced
via NVD·04:00 AM
RemedyDescriptionSeverityAffected Software
Sep 12, 2001
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-1999-1079?
CVE-1999-1079 is considered to be of medium severity as it allows local users to gain elevated privileges.
2
How do I fix CVE-1999-1079?
To fix CVE-1999-1079, ensure that setgid programs are configured properly and restrict access for untrusted local users.
3
Who is affected by CVE-1999-1079?
CVE-1999-1079 affects local users on IBM AIX versions 3.2.5 to 4.3.2, particularly those with access to setgid programs.
4
What type of vulnerability is CVE-1999-1079?
CVE-1999-1079 is a privilege escalation vulnerability that leverages the ptrace system call.
5
Can CVE-1999-1079 be exploited remotely?
No, CVE-1999-1079 can only be exploited by local users with access to the affected system.