Is CVE-1999-0108 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-1999-0108 being exploited in the wild.

How severe is CVE-1999-0108?

High severity, with a CVSS score of 7.2, published 1 May 1998.

Is there a fix for CVE-1999-0108?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-1999-0108 attacked?

It is attacked with local access, in an operating system.

Am I affected by CVE-1999-0108?

Check whether you run Sgi Irix. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-1999-0108: SGI IRIX buffer overflow in printers program

CVE-1999-0108 · Severity: high · CVSS 7.2 · Published 1998-05-01

The printers utility in the SGI IRIX operating system contains a security flaw that allows a local user to gain full administrative (root) control over the system. This utility is responsible for managing printer configurations, and the vulnerability can be exploited by a standard user to bypass security restrictions and potentially access sensitive data or disrupt operations. This issue affects older versions of the IRIX platform commonly used in high-performance computing environments.

Technologies: Sgi Irix. Vendors: Sgi.

Quick answers

Is CVE-1999-0108 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-1999-0108 being exploited in the wild.
How severe is CVE-1999-0108?: High severity, with a CVSS score of 7.2, published 1 May 1998.
Which products and versions are affected?: SGI IRIX 5.3, 6.2, 6.3.
Is there a fix for CVE-1999-0108?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-1999-0108 attacked?: It is attacked with local access, in an operating system.
Am I affected by CVE-1999-0108?: Check whether you run Sgi Irix. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A buffer overflow vulnerability exists in the /usr/sbin/printers executable in SGI IRIX. The flaw is triggered via the -xrm command-line argument, which fails to properly validate the length of input data before copying it into a fixed-size buffer. A local attacker can exploit this by passing a specially crafted, overly long string to the program, allowing them to overwrite the return address on the stack and redirect execution to an attacker-supplied shellcode. Successful exploitation results in arbitrary code execution with root privileges. The vulnerability has been confirmed on IRIX versions 5.3, 6.2, and 6.3.

Affected products

SGI IRIX 5.3, 6.2, 6.3

Timeline

1997-05-27: disclosed: Exploit code posted to Bugtraq mailing list by David Hedley
1998-05-01: advisory: NVD publication date

References

http://seclists.org/bugtraq/1997/May/191

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.