PT-1997-1186 · Sgi · Sgi Irix

Publicado 1997-01-04 · Atualizado 2017-10-10 · CVE-1999-1120

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SGI IRIX versions 6.4 and earlier

Description The issue is related to the netprint feature in SGI IRIX, which trusts the PATH environmental variable to find and execute the disable program. This trust allows local users to gain privileges.

Recommendations For SGI IRIX versions 6.4 and earlier, consider restricting access to the netprint feature and the disable program to minimize the risk of exploitation. As a temporary workaround, avoid using the netprint feature until a fix is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Identificadores relacionados

CVE-1999-1120

Produtos afetados

Sgi Irix

Referências · 8

• 🔥 https://exploit-db.com/exploits/19313 · Exploit
• 🔥 http://securityfocus.com/bid/395 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-1999-1120 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=87602167420403&w=2 · Nota
• ftp://patches.sgi.com/support/free/security/advisories/19961203-02-PX · Aviso do Fabricante
• http://osvdb.org/993 · Nota
• ftp://patches.sgi.com/support/free/security/advisories/19961203-01-PX · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/2107 · Nota