CVE-1999-1219: High severity sgi irix vulnerability

Published Aug 11, 1994

Updated

Vulnerability in sgihelp in the SGI help system and print manager in IRIX 5.2 and earlier allows local users to gain root privileges, possibly through the clogin command.

Affected Software

2 affected components

SGI IRIX=5.1

SGI IRIX=5.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Remove
Remove sgihelp from your environment.
Uninstall or remove the SGI help system component (sgihelp) from affected IRIX systems if it is not required to eliminate the vulnerable binary.
Remove
Remove clogin from your environment.
Remove or disable the clogin command and any related print-manager helper programs that may be used to exploit the vulnerability.
Compensating control
Restrict local user accounts and interactive/local access: limit who can log in locally, enforce the principle of least privilege for local accounts, and isolate affected systems from untrusted users until a vendor fix is available.

Event History

Aug 11, 1994

CVE Published

04:00 AM

Data Sourced

via NVD·04:00 AM

RemedyDescriptionSeverityAffected Software

Sep 12, 2001

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-1999-1219?

CVE-1999-1219 is considered a high severity vulnerability due to its potential to allow local users to gain root privileges.

How do I fix CVE-1999-1219?

To fix CVE-1999-1219, it is recommended to upgrade to a version of SGI IRIX newer than 5.2.

Who is affected by CVE-1999-1219?

CVE-1999-1219 affects local users of SGI IRIX 5.2 and earlier versions.

What type of vulnerability is CVE-1999-1219?

CVE-1999-1219 is a local privilege escalation vulnerability found in the SGI help system.

Can CVE-1999-1219 be exploited remotely?

No, CVE-1999-1219 requires local access to the system to be exploited.