CVE-1999-1410: Medium severity SGI IRIX vulnerability

Published May 9, 1997

Updated

addnetpr in IRIX 5.3 and 6.2 allows local users to overwrite arbitrary files and possibly gain root privileges via a symlink attack on the printers temporary file.

Affected Software

10 affected components

SGI IRIX=6.0.1

SGI IRIX=5.3

SGI IRIX=6.0.1

SGI IRIX=6.1

SGI IRIX=5.0.1

SGI IRIX=5.1.1

SGI IRIX=5.0

SGI IRIX=5.1

SGI IRIX=5.2

SGI IRIX=6.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Remove
Remove SGI IRIX addnetpr from your environment.
Uninstall or remove the addnetpr program to prevent local users from exploiting the symlink vulnerability against the printers temporary file. If removal is not feasible, disable or restrict execution of addnetpr to trusted administrators only.

Event History

May 9, 1997

CVE Published

04:00 AM

Data Sourced

via NVD·04:00 AM

RemedyDescriptionSeverityAffected Software

Sep 12, 2001

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-1999-1410?

CVE-1999-1410 is considered to have high severity due to the potential for local users to gain root privileges.

How do I fix CVE-1999-1410?

Fixing CVE-1999-1410 involves applying security patches provided by SGI and ensuring proper permissions are set on temporary files.

What software versions are affected by CVE-1999-1410?

CVE-1999-1410 affects multiple versions of IRIX, including 5.0, 5.1, 5.2, 5.3, 6.0.1, 6.1, and 6.2.

What kind of attack is described in CVE-1999-1410?

CVE-1999-1410 describes a symlink attack that allows local users to overwrite arbitrary files.

Can I exploit CVE-1999-1410 remotely?

CVE-1999-1410 is a local vulnerability and cannot be exploited remotely.