CVE-1999-1181: High severity SGI IRIX vulnerability
Vulnerability in On-Line Customer Registration software for IRIX 6.2 through 6.4 allows local users to gain root privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
SGI IRIX On-Line Customer Registrationfrom your environment.Uninstall the On-Line Customer Registration software from SGI IRIX systems (versions 6.2 through 6.4) if it is present and not required.
- Configuration
Stop and disable the On-Line Customer Registration service/process on affected IRIX systems (6.2 through 6.4) until a vendor fix is available.
SGI IRIX On-Line Customer Registration enabled = false - Compensating control
Restrict local access to systems running IRIX 6.2–6.4 to trusted administrators only (for example via local account lockdown, ACLs, or physical access controls) to prevent unprivileged users from exploiting the vulnerability until remediation is applied.
- Operational
Audit affected systems for signs of local privilege escalation (check logs and root account activity), remove any unauthorized changes or accounts, and rotate credentials that may have been exposed before restoring services or applying fixes.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1181?
CVE-1999-1181 is considered a critical vulnerability as it allows local users to gain root privileges.
How do I fix CVE-1999-1181?
To fix CVE-1999-1181, you should upgrade to a version of IRIX that is not affected, specifically versions later than 6.4.
Who is affected by CVE-1999-1181?
Local users on IRIX 6.2 through 6.4 are affected by CVE-1999-1181.
What can an attacker do if they exploit CVE-1999-1181?
If an attacker exploits CVE-1999-1181, they can gain root privileges, allowing them to take complete control of the system.
Is there a workaround for CVE-1999-1181?
There are no known effective workarounds for CVE-1999-1181; the only mitigation is to upgrade the affected software.