Quick answers
- Is CVE-1999-0149 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-1999-0149 being exploited in the wild.
- How severe is CVE-1999-0149?
- High severity, with a CVSS score of 7.5, published 19 April 1997.
- Which products and versions are affected?
- SGI IRIX.
- Is there a fix for CVE-1999-0149?
- A patch was published on 1997-05-01: SGI released security advisory 19970501-02-PX Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is CVE-1999-0149 attacked?
- It is attacked over the network, in an operating system.
- Am I affected by CVE-1999-0149?
- Check whether you run Sgi Irix. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
The 'wrap' CGI executable in SGI IRIX is vulnerable to a directory traversal attack. By supplying '..' (dot-dot) sequences in the input parameters, a remote, unauthenticated attacker can bypass intended directory restrictions to view arbitrary directory listings on the host file system. This is a classic path traversal vulnerability where the application fails to sanitize user-supplied input before using it in file system operations. Successful exploitation results in information disclosure, though the CVSS 2.0 score suggests potential impacts on integrity and availability depending on the specific environment and CGI implementation. SGI released security advisories and patches (19970501-02-PX) to address this issue.
Affected products
- SGI IRIX
Timeline
- 1997-04-19: disclosed
- 1997-05-01: patched: SGI released security advisory 19970501-02-PX