PT-1994-1008 · Sgi · Irix

Publicado 1994-10-02 · Atualizado 2017-12-19 · CVE-1999-1022

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Média

Vetor base

AV:L/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IRIX versions 4.x through 5.x

Description The issue concerns the serial ports administrative program, which relies on the user's PATH environmental variable to locate and execute the ls program. This trust in the PATH variable allows local users to potentially gain root privileges by using a Trojan horse ls program.

Recommendations For IRIX versions 4.x through 5.x, consider modifying the serial ports administrative program to use an absolute path for executing the ls program, rather than relying on the user's PATH environmental variable, until a proper fix is available.

Exploit

Correção

Identificadores relacionados

CVE-1999-1022

Produtos afetados

Irix

Referências · 5

• 🔥 http://securityfocus.com/archive/1/930 · Exploit
• 🔥 http://securityfocus.com/bid/464 · Exploit
• 🔥 https://exploit-db.com/exploits/19351 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/2111 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1022 · Nota de Segurança