CVE-1999-1243: Medium severity sgi irix vulnerability
SGI Desktop Permissions Tool in IRIX 6.0.1 and earlier allows local users to modify permissions for arbitrary files and gain privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
SGI Desktop Permissions Toolfrom your environment.Uninstall or remove the SGI Desktop Permissions Tool from IRIX systems where it is not required.
- Configuration
Disable the SGI Desktop Permissions Tool or remove its execute permission for non-privileged users so local users cannot run it.
SGI Desktop Permissions Tool executable/availability = disabled for non-administrative users - Compensating control
Restrict access to systems that have the tool installed to trusted administrators only (host-based access controls, restricted logins, or local ACLs) to prevent unprivileged local users from invoking the tool.
- Operational
Audit system logs and file permission changes to detect misuse of the tool; review accounts for unexpected privilege escalation and remediate/remove any unauthorized privilege changes.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1243?
CVE-1999-1243 is classified as a high-severity vulnerability due to its potential to allow local users to escalate privileges.
How do I fix CVE-1999-1243?
To mitigate CVE-1999-1243, restrict access to the SGI Desktop Permissions Tool and apply any available patches for your IRIX version.
Who is affected by CVE-1999-1243?
CVE-1999-1243 affects local users of SGI IRIX versions up to and including 6.0.1.
What type of vulnerability is CVE-1999-1243?
CVE-1999-1243 is a local privilege escalation vulnerability that can allow unauthorized permission changes.
Can remote attackers exploit CVE-1999-1243?
No, CVE-1999-1243 requires local access to the system, making it exploitable only by local users.