Is CVE-1999-1114 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-1999-1114 being exploited in the wild.

How severe is CVE-1999-1114?

High severity, with a CVSS score of 7.2, published 8 April 1998.

Is there a fix for CVE-1999-1114?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-1999-1114 attacked?

It is attacked with local access, in an operating system.

Am I affected by CVE-1999-1114?

Check whether you run AT&T Korn Shell or Sgi Irix at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-1999-1114: SGI IRIX Korn Shell buffer overflow in suid_exec

CVE-1999-1114 · Severity: high · CVSS 7.2 · Published 1998-04-08

A security vulnerability exists in the Korn Shell (ksh) component of older operating systems like SGI IRIX. This component is responsible for executing commands with elevated permissions. An attacker who already has basic access to the system can exploit this flaw to gain full administrative (root) control, potentially leading to total system compromise and data theft.

Technologies: Sgi Irix. Vendors: Sgi.

Quick answers

Is CVE-1999-1114 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-1999-1114 being exploited in the wild.
How severe is CVE-1999-1114?: High severity, with a CVSS score of 7.2, published 8 April 1998.
Which products and versions are affected?: Sgi Irix 6.x and earlier.
Is there a fix for CVE-1999-1114?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-1999-1114 attacked?: It is attacked with local access, in an operating system.
Am I affected by CVE-1999-1114?: Check whether you run AT&T Korn Shell or Sgi Irix at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A buffer overflow vulnerability exists within the suid_exec utility of the Korn Shell (ksh), specifically on SGI IRIX 6.x and potentially other Unix-like operating systems. The flaw is located in the handling of environment variables or command-line arguments passed to the setuid-root suid_exec binary. A local, unprivileged attacker can exploit this by providing specially crafted input that overflows a memory buffer, allowing for the execution of arbitrary code with root privileges. Patches were historically released by SGI and other affected vendors to address this issue.

Affected products

SGI IRIX 6.x and earlier
AT&T Korn Shell (ksh)

Timeline

1998-04-05: advisory: SGI security advisory 19980405-01-I released
1998-04-08: disclosed: NVD publication date

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.