CVE-1999-1347: Medium severity redhat Linux vulnerability
Xsession in Red Hat Linux 6.1 and earlier can allow local users with restricted accounts to bypass execution of the .xsession file by starting kde, gnome or anotherlevel from kdm.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Configure kdm so that restricted/local accounts cannot select or start alternative sessions (specifically: kde, gnome or anotherlevel) from the kdm session menu. Adjust kdm configuration to disable session selection or remove those session options for restricted users.
kdm (KDE Display Manager) session selection for restricted users = disabled - Compensating control
Restrict which local accounts may log in via kdm or start graphical sessions (e.g., allowlist only trusted users/groups for kdm or otherwise prevent restricted accounts from using the display manager).
- Operational
Audit local 'restricted' accounts to identify any that could bypass .xsession execution, and adjust or remove account privileges as needed; monitor for unexpected graphical session starts from restricted accounts.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1347?
CVE-1999-1347 is considered a moderate severity vulnerability as it allows local users with restricted accounts to bypass security constraints.
How do I fix CVE-1999-1347?
To fix CVE-1999-1347, update to a later version of Red Hat Linux that is not affected, beyond version 6.1.
What systems are affected by CVE-1999-1347?
CVE-1999-1347 affects Red Hat Linux 6.1 and earlier versions.
Can CVE-1999-1347 be exploited remotely?
CVE-1999-1347 requires local access for exploitation, so it cannot be exploited remotely.
What impact does CVE-1999-1347 have on system security?
CVE-1999-1347 may allow a local user to execute potentially unauthorized commands, compromising system security.