PT-1997-1246 · Sgi · Irix

Published 1997-05-07 · Updated 2016-10-18 · CVE-1999-1461

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IRIX versions 5.3 through 6.5.10

Description The issue concerns the inpview in InPerson, which trusts the PATH environmental variable to find and execute the ttsession program. This trust allows local users to obtain root access by modifying the PATH to point to a Trojan horse ttsession program.

Recommendations For IRIX versions 5.3 through 6.5.10, consider restricting access to the PATH environmental variable to prevent modification, or implement a secure method to validate the location of the ttsession program before execution. As a temporary workaround, consider setting a fixed path for the ttsession program to prevent exploitation.

Exploit

Fix

Related Identifiers

CVE-1999-1461

Affected Products

Irix

References · 5

• 🔥 http://securityfocus.com/bid/381 · Exploit
• 🔥 https://exploit-db.com/exploits/19304 · Exploit
• ftp://patches.sgi.com/support/free/security/advisories/20001101-01-I · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-1999-1461 · Security Note
• http://marc.info/?l=bugtraq&m=87602167420921&w=2 · Note