PT-1997-1213 · Sgi · Sgi Irix+1

Published 1997-05-16 · Updated 2017-12-19 · CVE-1999-1232

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SGI IRIX version 6.2

Description The issue allows local users to execute arbitrary commands by modifying the PATH environment variable to point to a malicious cp program, exploiting an untrusted search path vulnerability in day5datacopier.

Recommendations For SGI IRIX version 6.2, consider restricting access to the day5datacopier until a fix is available, and avoid using a modified PATH environment variable that could point to a malicious cp program.

Fix

Related Identifiers

CVE-1999-1232

Affected Products

Sgi Irix

Day5Datacopier

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-1999-1232 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/3316 · Note
• http://osvdb.org/8559 · Note
• http://marc.info/?l=bugtraq&m=87602167420994&w=2 · Note