CVE-1999-1494: Low severity sgi irix vulnerability
colorview in Silicon Graphics IRIX 5.1, 5.2, and 6.0 allows local attackers to read arbitrary files via the -text argument.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
SGI IRIX colorviewfrom your environment.Uninstall or remove the colorview binary from affected SGI IRIX systems if the program is not required.
- Configuration
Restrict execution of the colorview binary so only trusted administrative accounts can run it (for example, remove execute permission for non-privileged users or move the binary to a root-only directory; e.g., adjust filesystem permissions to prevent general user execution).
SGI IRIX: colorview executable permissions = restricted to trusted/administrative users - Compensating control
Restrict local access to affected hosts and remove or disable unneeded local user accounts. Apply host-based access controls or ACLs to prevent untrusted users from executing colorview or from reading sensitive files until the issue is otherwise remediated.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1494?
CVE-1999-1494 has been classified as a moderate severity vulnerability.
How do I fix CVE-1999-1494?
To fix CVE-1999-1494, you should upgrade to a patched version of the Silicon Graphics IRIX software.
What impact does CVE-1999-1494 have on systems?
CVE-1999-1494 allows local attackers to read arbitrary files, potentially exposing sensitive information.
Which versions of SGI IRIX are affected by CVE-1999-1494?
CVE-1999-1494 affects SGI IRIX versions 5.1, 5.1.1, 5.2, 6.0, and 6.0.1.
Who is vulnerable to CVE-1999-1494?
Local users on systems running vulnerable versions of Silicon Graphics IRIX are at risk from CVE-1999-1494.