CVE-1999-1552: High severity IBM AIX vulnerability
dpsexec (DPS Server) when running under XDM in IBM AIX 3.2.5 and earlier does not properly check privileges, which allows local users to overwrite arbitrary files and gain privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
IBM AIX dpsexec (DPS Server)from your environment.If DPS services are not required, stop and uninstall or remove the dpsexec executable from affected AIX systems (3.2.5 and earlier) to eliminate the vulnerable component.
- Configuration
Reconfigure the X Display Manager (XDM) so it does not start or run dpsexec; stop any dpsexec processes launched by XDM.
dpsexec (DPS Server) / XDM run_under_XDM = false - Compensating control
Restrict local user access and tighten filesystem permissions to prevent unprivileged users from overwriting dpsexec-related files; limit who can manage or log into XDM and apply host-based access controls until a vendor fix is available.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1552?
CVE-1999-1552 is considered a high severity vulnerability due to its potential for privilege escalation.
How do I fix CVE-1999-1552?
To fix CVE-1999-1552, users should upgrade to a version of IBM AIX later than 3.2.5 where this vulnerability has been addressed.
What systems are affected by CVE-1999-1552?
CVE-1999-1552 affects IBM AIX versions 3.2.5 and earlier, including specific versions like 3.1 and 3.2.
What are the risks associated with CVE-1999-1552?
The risks associated with CVE-1999-1552 include unauthorized file overwriting and potential privilege escalation by local users.
Is CVE-1999-1552 still relevant today?
While CVE-1999-1552 was reported in 1999, it remains relevant for users of legacy systems that are still operating on vulnerable versions of IBM AIX.