CVE-1999-1485: Medium severity sgi irix vulnerability
nsd in IRIX 6.5 through 6.5.2 exports a virtual filesystem on a UDP port, which allows remote attackers to view files and cause a possible denial of service by mounting the nsd virtual file system.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
SGI IRIX nsdfrom your environment.Uninstall or do not install the nsd daemon if the functionality is not required.
- Configuration
Disable nsd's export of the virtual filesystem over UDP via nsd configuration or startup options so it does not export the virtual filesystem on a UDP port.
nsd (SGI IRIX) export virtual filesystem over UDP = disabled - Compensating control
Block or restrict network access to the UDP port used by nsd at perimeter firewalls and host-based firewalls; allow access only from trusted management hosts.
- Operational
Stop or disable the nsd service/daemon until the vendor provides a patch or other permanent fix.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1485?
CVE-1999-1485 has been classified as a denial of service vulnerability that impacts certain versions of IRIX.
How do I fix CVE-1999-1485?
To mitigate CVE-1999-1485, users should upgrade to a patched version of IRIX that addresses the vulnerability.
What versions of IRIX are affected by CVE-1999-1485?
CVE-1999-1485 affects IRIX versions 6.5, 6.5.1, and 6.5.2.
What can an attacker do with the CVE-1999-1485 vulnerability?
An attacker can remotely view files and potentially cause a denial of service by exploiting the nsd virtual filesystem.
Is CVE-1999-1485 still a concern today?
While IRIX is not widely used today, CVE-1999-1485 remains a significant concern for systems that still operate on affected versions.