PT-1998-1150 · At&T+1 · Korn Shell+1

Published 1998-04-08 · Updated 2017-10-10 · CVE-1999-1114

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Korn Shell (ksh) versions prior to the fixed version on IRIX 6.x and earlier

Description A buffer overflow issue in the suid exec program of Korn Shell (ksh) allows local users to gain root privileges. This issue may affect other operating systems besides IRIX 6.x and earlier.

Recommendations For Korn Shell (ksh) on IRIX 6.x and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-1999-1114

Affected Products

Irix

Korn Shell

References · 7

• 🔥 http://securityfocus.com/bid/467 · Exploit
• 🔥 https://exploit-db.com/exploits/19353 · Exploit
• ftp://patches.sgi.com/support/free/security/advisories/19980405-01-I · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-1999-1114 · Security Note
• http://ciac.llnl.gov/ciac/bulletins/h-15a.shtml · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/2100 · Note
• ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-96.17.suid_exec.vul · Note