Is CVE-1999-1183 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-1999-1183 being exploited in the wild.

How severe is CVE-1999-1183?

High severity, with a CVSS score of 7.6, published 2 April 1998.

Is there a fix for CVE-1999-1183?

A patch was published on 1998-04-03: SGI released security advisories 19980403-01-PX and 19980403-02-PX. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-1999-1183 attacked?

It is attacked over the network, in an operating system.

Am I affected by CVE-1999-1183?

Check whether you run Sgi Irix at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-1999-1183: SGI IRIX remote command execution in System Manager sysmgr GUI

CVE-1999-1183 · Severity: high · CVSS 7.6 · Published 1998-04-02

A vulnerability in the SGI IRIX System Manager (sysmgr) allows remote attackers to execute unauthorized commands on a target system. This occurs when a user opens a malicious file, often delivered via email, that the system's mail handler incorrectly processes as a legitimate administrative task. Successful exploitation could lead to a full system compromise, allowing an attacker to access sensitive data or disrupt operations.

Technologies: Sgi Irix. Vendors: Sgi.

Quick answers

Is CVE-1999-1183 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-1999-1183 being exploited in the wild.
How severe is CVE-1999-1183?: High severity, with a CVSS score of 7.6, published 2 April 1998.
Which products and versions are affected?: Sgi Irix 6.3, 6.4.
Is there a fix for CVE-1999-1183?: A patch was published on 1998-04-03: SGI released security advisories 19980403-01-PX and 19980403-02-PX. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-1999-1183 attacked?: It is attacked over the network, in an operating system.
Am I affected by CVE-1999-1183?: Check whether you run Sgi Irix at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability exists in the SGI IRIX System Manager (sysmgr) GUI due to the way it handles specific MIME types. When a user's Mailcap configuration supports 'x-sgi-task' or 'x-sgi-exec' types, the system may automatically execute commands defined in 'runtask' or 'runexec' descriptor files provided by a remote attacker. This is essentially a remote command execution vulnerability triggered by a trojan horse file. An attacker can exploit this by sending a specially crafted file to a user who then opens it with a vulnerable mail client or browser. Patches were released by SGI in 1998 to address this issue.

Affected products

SGI IRIX 6.3, 6.4

Timeline

1998-04-02: disclosed
1998-04-03: patched: SGI released security advisories 19980403-01-PX and 19980403-02-PX.

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.