CVE-1999-1116: High severity sgi irix vulnerability
Vulnerability in runpriv in Indigo Magic System Administration subsystem of SGI IRIX 6.3 and 6.4 allows local users to gain root privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
sgi/irix/indigo_magic/runprivfrom your environment.Remove or uninstall the runpriv binary from systems running SGI IRIX 6.3 or 6.4 if the subsystem is not required.
- Configuration
Disable the Indigo Magic System Administration subsystem (and the runpriv utility) if it is not required to prevent local users from obtaining root privileges.
Indigo Magic System Administration (runpriv) enabled = false - Compensating control
Restrict local account, console and terminal access to trusted administrators and apply host-based access controls to prevent unprivileged local users from executing runpriv or other administration utilities.
- Operational
If compromise is suspected, review system logs for signs of local privilege escalation and rotate root and other privileged credentials after remediation.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1116?
CVE-1999-1116 is considered a high severity vulnerability that allows local users to gain root privileges.
How do I fix CVE-1999-1116?
To fix CVE-1999-1116, you should update your SGI IRIX system to a version that is not affected, specifically IRIX 6.5 or later.
Who is affected by CVE-1999-1116?
Local users of SGI IRIX versions 6.3 and 6.4 are affected by CVE-1999-1116.
What systems are impacted by CVE-1999-1116?
CVE-1999-1116 affects the Indigo Magic System Administration subsystem in SGI IRIX versions 6.3 and 6.4.
Is CVE-1999-1116 a remote or local vulnerability?
CVE-1999-1116 is a local vulnerability that requires an authenticated user to exploit.