PT-1990-1009 · Sgi · Irix

CVE-1999-1554 · Publicado 1990-10-31 · Atualizado 2025-04-03

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions SGI IRIX versions 3.3 through 3.3.1

Description The issue arises from the /usr/sbin/Mail program on SGI IRIX, which fails to properly set the group ID to the group ID of the user who started Mail. This allows local users to read the mail of other users.

Recommendations For SGI IRIX versions 3.3 through 3.3.1, consider restricting access to the /usr/sbin/Mail program until a proper fix is applied to ensure the group ID is set correctly for the user who started Mail.

Correção

Identificadores relacionados

CVE-1999-1554

Produtos afetados

Irix

Referências · 5

• http://iss.net/security_center/static/3164.php · Nota
• http://securityfocus.com/bid/13 · Aviso do Fabricante
• https://t.me/cvenotify/117492 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-1999-1554 · Nota de Segurança
• http://cert.org/advisories/CA-1990-08.html · Correção