CVE-1999-1449: Low severity Sun SunOS vulnerability
SunOS 4.1.4 on a Sparc 20 machine allows local users to cause a denial of service (kernel panic) by reading from the /dev/tcx0 TCX device.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
SunOS /dev/tcx0 device nodefrom your environment.If the TCX device is not required, remove or rename the /dev/tcx0 device node or unload/disable the TCX driver to prevent any user from reading from it.
- Configuration
Change ownership and permissions so only root can read/write the device (for example: chown root:root /dev/tcx0; chmod 0600 /dev/tcx0) to prevent local unprivileged users from reading the device.
SunOS device node /dev/tcx0 permissions = root-only read/write (mode 0600) - Compensating control
Restrict local account access and logins: remove or disable unneeded local user accounts and restrict shell access so unprivileged users cannot interact with device files like /dev/tcx0.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1449?
CVE-1999-1449 has a severity classification that indicates it can lead to local denial of service via kernel panic.
How do I fix CVE-1999-1449?
The best way to mitigate CVE-1999-1449 is to restrict access to the /dev/tcx0 device or upgrade to a patched version of the operating system.
Who is affected by CVE-1999-1449?
CVE-1999-1449 affects local users of SunOS 4.1.4 on Sparc 20 machines.
What type of attack does CVE-1999-1449 represent?
CVE-1999-1449 represents a local denial of service attack that causes system instability.
Is CVE-1999-1449 remotely exploitable?
CVE-1999-1449 is not remotely exploitable, as it requires local access to the system.