CVE-1999-1398
First published: Wed May 07 1997(Updated: )
Vulnerability in xfsdump in SGI IRIX may allow local users to obtain root privileges via the bck.log log file, possibly via a symlink attack.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SGI IRIX | =6.0.1 | |
| SGI IRIX | =5.3 | |
| SGI IRIX | =6.0.1 | |
| SGI IRIX | =6.1 | |
| SGI IRIX | =5.0.1 | |
| SGI IRIX | =5.1.1 | |
| SGI IRIX | =6.4 | |
| SGI IRIX | =5.0 | |
| SGI IRIX | =5.1 | |
| SGI IRIX | =5.2 | |
| SGI IRIX | =6.0 | |
| SGI IRIX | =6.3 | |
| SGI IRIX | =5.3 | |
| SGI IRIX | =6.2 | |
| =5.0 | ||
| =5.0.1 | ||
| =5.1 | ||
| =5.1.1 | ||
| =5.2 | ||
| =5.3 | ||
| =5.3 | ||
| =6.0 | ||
| =6.0.1 | ||
| =6.0.1 | ||
| =6.1 | ||
| =6.2 | ||
| =6.3 | ||
| =6.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-1999-1398?
CVE-1999-1398 is considered a high-severity vulnerability due to its potential to allow local users to gain root privileges.
How do I fix CVE-1999-1398?
To fix CVE-1999-1398, you should ensure that no unauthorized users can access the bck.log log file and regularly apply patches provided by SGI for the IRIX versions affected.
Which versions of SGI IRIX are affected by CVE-1999-1398?
CVE-1999-1398 affects SGI IRIX versions 5.0, 5.0.1, 5.1, 5.1.1, 5.2, 5.3, 6.0, 6.0.1, 6.1, 6.2, 6.3, and 6.4.
What type of attack does CVE-1999-1398 allow?
CVE-1999-1398 potentially allows a local user to exploit a symlink attack to obtain root privileges.
Who is impacted by CVE-1999-1398?
Local users of SGI IRIX systems are impacted by CVE-1999-1398 due to the vulnerability in the xfsdump utility.
- collector/nvd-historical
- collector/nvd-index
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/references
- agent/remedy
- agent/severity
- agent/description
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/author
- agent/softwarecombine
- agent/event
- agent/tags
- agent/source
- vendor/sgi
- canonical/sgi irix
- version/sgi irix/6.0.1
- version/sgi irix/5.3
- version/sgi irix/6.1
- version/sgi irix/5.0.1
- version/sgi irix/5.1.1
- version/sgi irix/6.4
- version/sgi irix/5.0
- version/sgi irix/5.1
- version/sgi irix/5.2
- version/sgi irix/6.0
- version/sgi irix/6.3
- version/sgi irix/6.2