CVE-1999-1095: High severity redhat Linux vulnerability
sort creates temporary files and follows symbolic links, which allows local users to modify arbitrary files that are writable by the user running sort, as observed in updatedb and other programs that use sort.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Configure updatedb and any other programs that invoke sort to run as an unprivileged (non-root) user rather than as root or another privileged account.
updatedb and other programs invoking sort run_as_user = unprivileged (non-root) - Compensating control
Restrict who can execute the sort binary and programs that call it to trusted users/processes (for example, via file permissions or ACLs) so local unprivileged users cannot invoke these commands.
- Operational
Audit systems for all uses of sort (e.g., updatedb and other callers). Identify instances running with elevated privileges or with setuid/setgid bits and remove setuid/setgid or reconfigure those invocations to run unprivileged until a vendor patch is available.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1095?
CVE-1999-1095 is classified with a moderate severity level due to potential unauthorized access to sensitive files.
How do I fix CVE-1999-1095?
To remediate CVE-1999-1095, ensure that the sort command does not follow symbolic links when creating temporary files.
What versions of software are affected by CVE-1999-1095?
CVE-1999-1095 affects Red Hat Linux version 4.1 and Slackware version 3.3.
Who can exploit CVE-1999-1095?
Local users with access to the sort command can exploit CVE-1999-1095 to modify arbitrary writable files.
What are the implications of CVE-1999-1095?
The implications of CVE-1999-1095 include the potential for local users to manipulate files in a manner that could compromise system integrity.