CVE-1999-1583: Buffer Overflow
Buffer overflow in nslookup for AIX 4.3 allows local users to execute arbitrary code via a long hostname command line argument.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
AIX/nslookupfrom your environment.If nslookup is not required on the system, uninstall or remove the nslookup binary to eliminate the vulnerable component.
- Configuration
Restrict execution of the nslookup binary so local unprivileged users cannot run it (for example, remove world/group execute permission or change ownership to an administrative account).
nslookup (AIX 4.3) executable = disabled for unprivileged users - Compensating control
Limit local user access and privileges on affected systems (restrict which accounts can log in or execute binaries) and enforce least-privilege to reduce the ability of local users to exploit the vulnerability.
- Operational
If there is any suspicion of exploitation, perform incident response: investigate for signs of arbitrary code execution, restore affected systems from known-good backups, and rotate any credentials potentially used on compromised systems.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1583?
CVE-1999-1583 is classified as a critical vulnerability due to the potential for local users to execute arbitrary code.
How do I fix CVE-1999-1583?
To fix CVE-1999-1583, update your AIX 4.3 system with the latest patches provided by IBM.
Who is affected by CVE-1999-1583?
Local users of IBM AIX version 4.3 are affected by CVE-1999-1583.
What causes CVE-1999-1583?
CVE-1999-1583 is caused by a buffer overflow in the nslookup command when handling long hostname command line arguments.
Can CVE-1999-1583 be exploited remotely?
CVE-1999-1583 requires local access to the AIX 4.3 system to exploit the vulnerability.