CVE-1999-1120: Medium severity sgi irix vulnerability
netprint in SGI IRIX 6.4 and earlier trusts the PATH environmental variable for finding and executing the disable program, which allows local users to gain privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
sgi-irix/netprintfrom your environment.Uninstall or disable the netprint utility if it is not required to eliminate the privilege escalation risk.
- Configuration
Modify netprint so it does not trust the PATH environment variable when locating and executing the 'disable' program. Ensure netprint invokes the disable program using an absolute path or clears/sanitizes PATH before executing external commands.
SGI IRIX netprint PATH handling = use absolute path or sanitize PATH - Configuration
Remove the setuid bit from the netprint binary to prevent privilege escalation (for example, run 'chmod u-s /path/to/netprint' on affected systems).
netprint binary (setuid) setuid = disabled - Compensating control
Restrict execution of the netprint binary to trusted users and groups via filesystem permissions and limit local user accounts on affected systems; if possible, isolate or remove local untrusted accounts to reduce attack surface until a code fix is available.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1120?
CVE-1999-1120 has a high severity rating due to its potential to allow local users to gain elevated privileges.
How do I fix CVE-1999-1120?
To fix CVE-1999-1120, ensure that the PATH variable is properly restricted or modify the disable program to validate the execution environment.
Which SGI IRIX versions are affected by CVE-1999-1120?
CVE-1999-1120 affects SGI IRIX versions 5.3 through 6.4 inclusive.
Who is impacted by CVE-1999-1120?
Local users of SGI IRIX systems can exploit CVE-1999-1120 to gain unauthorized privileges.
What is the main issue in CVE-1999-1120?
The main issue in CVE-1999-1120 is the trust in the PATH environmental variable, which allows local users to execute unauthorized programs.