PT-1997-1213 · Sgi · Sgi Irix+1

Publicado 1997-05-16 · Atualizado 2017-12-19 · CVE-1999-1232

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SGI IRIX version 6.2

Description The issue allows local users to execute arbitrary commands by modifying the PATH environment variable to point to a malicious cp program, exploiting an untrusted search path vulnerability in day5datacopier.

Recommendations For SGI IRIX version 6.2, consider restricting access to the day5datacopier until a fix is available, and avoid using a modified PATH environment variable that could point to a malicious cp program.

Correção

Identificadores relacionados

CVE-1999-1232

Produtos afetados

Sgi Irix

Day5Datacopier

Referências · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/3316 · Nota
• http://osvdb.org/8559 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1232 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=87602167420994&w=2 · Nota