CVE-1999-1406: Low severity redhat linux vulnerability
dumpreg in Red Hat Linux 5.1 opens /dev/mem with ORDWR access, which allows local users to cause a denial of service (crash) by redirecting fd 1 (stdout) to the kernel.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Red Hat Linux/dumpregfrom your environment.Uninstall or remove the dumpreg utility from systems where it is not required to eliminate the local denial-of-service risk.
- Configuration
Modify the dumpreg utility so it opens /dev/mem read-only (O_RDONLY) instead of O_RDWR to prevent allowing local users to redirect stdout into kernel memory.
Red Hat Linux (dumpreg) /dev/mem open mode = O_RDONLY - Compensating control
Restrict execution and access: ensure dumpreg is owned by root and not executable by untrusted users (e.g., chown root:root; chmod 0700), and restrict access to /dev/mem so non-privileged users cannot open it.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1406?
CVE-1999-1406 is considered a moderate severity vulnerability as it can cause a denial of service due to system crashes.
How do I fix CVE-1999-1406?
To mitigate CVE-1999-1406, it is recommended to upgrade to a newer version of Red Hat Linux that does not include the vulnerable dumpreg utility.
Who is affected by CVE-1999-1406?
Local users of Red Hat Linux 5.1 are affected by CVE-1999-1406 due to the improper handling of /dev/mem.
What type of vulnerability is CVE-1999-1406?
CVE-1999-1406 is a local denial of service vulnerability caused by the inappropriate access to /dev/mem.
Can CVE-1999-1406 be exploited remotely?
CVE-1999-1406 cannot be exploited remotely as it requires local access to the system.