CVE-1999-1272: Buffer Overflow
Buffer overflows in CDROM Confidence Test program (cdrom) allow local users to gain root privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
sgi/irix/cdromfrom your environment.Uninstall or remove the CDROM Confidence Test program (cdrom) if it is not required on the system.
- Configuration
Remove the setuid bit or change ownership so the cdrom binary is not setuid root (for example, run chmod u-s on the cdrom executable or otherwise ensure non-root users cannot gain root via this binary).
SGI IRIX cdrom (CDROM Confidence Test program) setuid_bit = disabled - Compensating control
Restrict execution of the cdrom binary to trusted administrative accounts using filesystem permissions or ACLs; prevent untrusted local users from running the program until a vendor fix is available.
- Operational
Audit systems for signs of local privilege escalation (check logs, new root shells, modified accounts). If compromise is suspected, rotate root credentials and recover affected systems from trusted backups or reinstall.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1272?
CVE-1999-1272 is considered a high severity vulnerability due to its potential for local users to gain root privileges.
How do I fix CVE-1999-1272?
To fix CVE-1999-1272, update the affected versions of SGI IRIX to the latest available patches that address the buffer overflow.
Which versions of SGI IRIX are affected by CVE-1999-1272?
CVE-1999-1272 affects SGI IRIX versions 5, 6.0, 6.0.1, 6.1, 6.2, 6.3, and 6.4.
What type of vulnerability is CVE-1999-1272?
CVE-1999-1272 is classified as a buffer overflow vulnerability.
Can exploit of CVE-1999-1272 be remote or is it local?
The exploit for CVE-1999-1272 is local, requiring an attacker to have local access to the system.