CVE-1999-1401: Medium severity sgi irix vulnerability
Vulnerability in Desktop searchbook program in IRIX 5.0.x through 6.2 sets insecure permissions for certain user files (iconbook and searchbook).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Change filesystem permissions on per-user files named 'iconbook' and 'searchbook' so they are not accessible by group or others (i.e., allow only the file owner to read/write).
SGI IRIX Desktop searchbook file permissions for iconbook and searchbook files = restrict access to file owner only - Operational
Locate existing 'iconbook' and 'searchbook' files in user home directories across affected IRIX systems, and correct their permissions to the secure setting above. Audit systems to ensure no instances remain with insecure permissions.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1401?
CVE-1999-1401 is considered a moderate severity vulnerability.
How do I fix CVE-1999-1401?
To fix CVE-1999-1401, ensure that the permissions for the affected user files are set correctly to restrict unauthorized access.
Which versions of SGI IRIX are affected by CVE-1999-1401?
CVE-1999-1401 affects multiple versions of SGI IRIX including 5.0 through 6.2.
What files are vulnerable in CVE-1999-1401?
The vulnerable files in CVE-1999-1401 are iconbook and searchbook.
What types of systems are impacted by CVE-1999-1401?
CVE-1999-1401 impacts systems running the Desktop searchbook program on SGI IRIX operating systems.