PT-1990-1009 · Sgi · Irix

Published 1990-10-31 · Updated 2025-04-03 · CVE-1999-1554

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions SGI IRIX versions 3.3 through 3.3.1

Description The issue arises from the /usr/sbin/Mail program on SGI IRIX, which fails to properly set the group ID to the group ID of the user who started Mail. This allows local users to read the mail of other users.

Recommendations For SGI IRIX versions 3.3 through 3.3.1, consider restricting access to the /usr/sbin/Mail program until a proper fix is applied to ensure the group ID is set correctly for the user who started Mail.

Fix

Related Identifiers

CVE-1999-1554

Affected Products

Irix

References · 5

• http://securityfocus.com/bid/13 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-1999-1554 · Security Note
• http://cert.org/advisories/CA-1990-08.html · Patch
• http://iss.net/security_center/static/3164.php · Note
• https://t.me/cvenotify/117492 · Telegram Post