CVE-1999-1143: High severity SGI IRIX vulnerability
Vulnerability in runtime linker program rld in SGI IRIX 6.x and earlier allows local users to gain privileges via setuid and setgid programs.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Remove the setuid and setgid permission bits from the rld binary so it cannot be used to gain elevated privileges. If rld must run with elevated privileges for legitimate reasons, replace with a least-privilege alternative or restrict which accounts can execute it.
rld (runtime linker) setuid/setgid bits = remove - Configuration
Inventory all binaries with setuid/setgid on the system and remove those bits from any executable that does not require them for correct operation to eliminate unnecessary privilege escalation vectors.
SGI IRIX system setuid/setgid usage = disable for unnecessary binaries - Compensating control
Limit and control local user access: restrict interactive logins to trusted accounts, apply host-based access controls or filesystem permissions to prevent untrusted users from executing sensitive binaries, and monitor for execution of setuid/setgid programs.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1143?
CVE-1999-1143 is considered a high severity vulnerability due to the potential for local privilege escalation.
How do I fix CVE-1999-1143?
To fix CVE-1999-1143, ensure that you upgrade SGI IRIX to a patched version that mitigates this vulnerability.
Who is affected by CVE-1999-1143?
CVE-1999-1143 affects local users on SGI IRIX versions 6.x and earlier, including 5.x.
What are the potential risks of CVE-1999-1143?
The main risk of CVE-1999-1143 is that it allows local users to gain elevated privileges, which can lead to unauthorized access to sensitive information.
Is there a workaround for CVE-1999-1143?
As a workaround, you can limit access to setuid and setgid programs until the system is upgraded to a secure version.