PT-1998-1236 · Sgi · Sgi Os2 Irix

Publicado 1998-04-08 · Atualizado 2016-10-18 · CVE-1999-1501

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SGI OS2 IRIX version 6.3

Description The issue arises from the improper clearing of the IFS environmental variable by ipxchk and ipxlink in SGI OS2 IRIX, allowing local users to execute arbitrary commands.

Recommendations For SGI OS2 IRIX version 6.3, consider restricting access to the ipxchk and ipxlink functions until a proper fix is applied to ensure the IFS environmental variable is cleared before executing system calls.

Correção

Identificadores relacionados

CVE-1999-1501

Produtos afetados

Sgi Os2 Irix

Referências · 4

• http://securityfocus.com/bid/71 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=89217373930054&w=2 · Nota
• http://securityfocus.com/bid/70 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-1999-1501 · Nota de Segurança