CVE-1999-1492: High severity SGI IRIX vulnerability

Published May 27, 1998

Updated

Vulnerability in (1) diskperf and (2) diskalign in IRIX 6.4 allows local attacker to create arbitrary root owned files, leading to root privileges.

Affected Software

1 affected component

SGI IRIX=6.4

Recommended actions to resolve this vulnerability, in priority order.

Remove
Remove sgi-irix/diskperf from your environment.
Uninstall the diskperf binary from IRIX 6.4 systems if it is not required. If removal is not immediately possible, disable or restrict execution of diskperf to trusted/root users only to prevent local unprivileged attackers from exploiting it.
Remove
Remove sgi-irix/diskalign from your environment.
Uninstall the diskalign binary from IRIX 6.4 systems if it is not required. If removal is not immediately possible, disable or restrict execution of diskalign to trusted/root users only to prevent local unprivileged attackers from exploiting it.

May 27, 1998

CVE Published

04:00 AM

Data Sourced

via NVD·04:00 AM

RemedyDescriptionSeverityAffected Software

Sep 12, 2001

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

CVE-1999-1492 is considered a high severity vulnerability due to its potential for local attackers to gain root privileges.

To fix CVE-1999-1492, ensure that you apply the latest security patches released for IRIX 6.4.

CVE-1999-1492 affects users of IRIX 6.4 operating system.

CVE-1999-1492 can facilitate local attacks that allow attackers to create arbitrary root-owned files.

While CVE-1999-1492 pertains to an older system, it remains a risk for any systems still running IRIX 6.4 without adequate security measures.