PT-1997-1233 · Sgi · Spaceware+1

Publicado 1997-08-20 · Atualizado 2016-10-18 · CVE-1999-1399

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SpaceWare 7.3 v1.0 in IRIX 6.2

Description The issue allows local users to gain root privileges by manipulating the HOSTNAME environmental variable to contain commands that will be executed. This is achieved by setting the HOSTNAME variable to include the desired commands.

Recommendations For SpaceWare 7.3 v1.0 in IRIX 6.2, consider restricting the ability to set the HOSTNAME environmental variable to prevent unauthorized command execution until a proper fix is applied.

Exploit

Correção

Identificadores relacionados

CVE-1999-1399

Produtos afetados

Irix

Spaceware

Referências · 4

• 🔥 https://exploit-db.com/exploits/19357 · Exploit
• 🔥 http://securityfocus.com/bid/471 · Exploit
• http://marc.info/?l=bugtraq&m=87602746719552&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1399 · Nota de Segurança