CVE-1999-1186: High severity rxvt rxvt vulnerability
rxvt, when compiled with the PRINTPIPE option in various Linux operating systems including Linux Slackware 3.0 and RedHat 2.1, allows local users to gain root privileges by specifying a malicious program using the -print-pipe command line parameter.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
rxvtfrom your environment.Uninstall rxvt from systems where it is not required to eliminate the vulnerable binary.
- Configuration
Rebuild/compile rxvt without the PRINT_PIPE option so the -print-pipe command-line parameter is not available.
rxvt PRINT_PIPE (compile-time option) = disabled - Compensating control
Ensure the rxvt binary is not setuid-root and restrict execution to trusted local accounts; limit local user access to affected systems until the vulnerable functionality is removed.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1186?
CVE-1999-1186 is considered a critical vulnerability as it allows local users to gain root privileges on affected systems.
How do I fix CVE-1999-1186?
To fix CVE-1999-1186, upgrade the rxvt application to a version that does not include the PRINT_PIPE option or disable this option during compilation.
Which systems are affected by CVE-1999-1186?
CVE-1999-1186 affects various Linux operating systems, including Slackware 3.0 and RedHat 2.1.
Who can exploit CVE-1999-1186?
CVE-1999-1186 can be exploited by local users who have access to run the rxvt terminal with crafted command line parameters.
Is there a workaround for CVE-1999-1186?
A temporary workaround for CVE-1999-1186 is to restrict user access to the rxvt application until the vulnerability is patched.