CVE-1999-1384: High severity SGI IRIX vulnerability
Indigo Magic System Tour in the SGI system tour package (systour) for IRIX 5.x through 6.3 allows local users to gain root privileges via a Trojan horse .exitops program, which is called by the inst command that is executed by the RemoveSystemTour program.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
systour (SGI system tour package, Indigo Magic System Tour)from your environment.Uninstall the systour package (Indigo Magic System Tour) to remove the vulnerable RemoveSystemTour program that invokes inst and can be exploited via a Trojan .exitops.
- Compensating control
Prevent unprivileged local users from executing the RemoveSystemTour program (or remove the RemoveSystemTour binary). Restrict access via filesystem permissions or local access controls so that only trusted administrators can run or modify the program, until a vendor fix is available.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1384?
CVE-1999-1384 is classified as a high severity vulnerability due to its potential for local users to gain root privileges.
How do I fix CVE-1999-1384?
To fix CVE-1999-1384, it is recommended to remove the Indigo Magic System Tour package from your SGI IRIX system.
Which SGI IRIX versions are affected by CVE-1999-1384?
CVE-1999-1384 affects all SGI IRIX versions from 5.x up to and including 6.3.
What attack vector is associated with CVE-1999-1384?
The attack vector for CVE-1999-1384 involves a local user exploiting a Trojan horse .exitops program called by the inst command.
Can CVE-1999-1384 be exploited remotely?
No, CVE-1999-1384 can only be exploited locally by users who have already gained access to the system.