PT-1997-1186 · Sgi · Sgi Irix

Published 1997-01-04 · Updated 2017-10-10 · CVE-1999-1120

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SGI IRIX versions 6.4 and earlier

Description The issue is related to the netprint feature in SGI IRIX, which trusts the PATH environmental variable to find and execute the disable program. This trust allows local users to gain privileges.

Recommendations For SGI IRIX versions 6.4 and earlier, consider restricting access to the netprint feature and the disable program to minimize the risk of exploitation. As a temporary workaround, avoid using the netprint feature until a fix is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-1999-1120

Affected Products

Sgi Irix

References · 8

• 🔥 https://exploit-db.com/exploits/19313 · Exploit
• 🔥 http://securityfocus.com/bid/395 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-1999-1120 · Security Note
• ftp://patches.sgi.com/support/free/security/advisories/19961203-02-PX · Vendor Advisory
• http://marc.info/?l=bugtraq&m=87602167420403&w=2 · Note
• http://osvdb.org/993 · Note
• ftp://patches.sgi.com/support/free/security/advisories/19961203-01-PX · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/2107 · Note