CVE-1999-1489: Buffer Overflow
Buffer overflow in TestChip function in XFree86 SuperProbe in Slackware Linux 3.1 allows local users to gain root privileges via a long -nopr argument.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
XFree86 SuperProbefrom your environment.Uninstall or remove the XFree86 SuperProbe binary from systems if it is not required.
- Configuration
Remove the setuid bit from the XFree86 SuperProbe binary and restrict execution to root so unprivileged local users cannot run it. Example: chmod u-s /path/to/superprobe && chmod 700 /path/to/superprobe.
XFree86 SuperProbe setuid bit / file execute permissions = remove setuid; restrict execution to root (e.g., chmod u-s; chmod 700) - Compensating control
Until a vendor patch is available, restrict local user access to affected systems and the binary: disable or remove untrusted local accounts, apply filesystem ACLs or host-based access controls to prevent unprivileged execution, and limit interactive shell access to trusted administrators.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1489?
CVE-1999-1489 is a critical vulnerability that allows local users to gain root privileges on affected systems.
How do I fix CVE-1999-1489?
To fix CVE-1999-1489, you should upgrade to a patched version of Slackware Linux that addresses this buffer overflow issue.
Which versions of Slackware Linux are affected by CVE-1999-1489?
CVE-1999-1489 specifically affects Slackware Linux version 3.1.
Who can exploit CVE-1999-1489?
CVE-1999-1489 can be exploited by local users who can supply a specially crafted long -nopr argument.
What is the nature of the vulnerability in CVE-1999-1489?
CVE-1999-1489 is a buffer overflow vulnerability found in the TestChip function of XFree86 SuperProbe.