PT-1998-1236 · Sgi · Sgi Os2 Irix

Published 1998-04-08 · Updated 2016-10-18 · CVE-1999-1501

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SGI OS2 IRIX version 6.3

Description The issue arises from the improper clearing of the IFS environmental variable by ipxchk and ipxlink in SGI OS2 IRIX, allowing local users to execute arbitrary commands.

Recommendations For SGI OS2 IRIX version 6.3, consider restricting access to the ipxchk and ipxlink functions until a proper fix is applied to ensure the IFS environmental variable is cleared before executing system calls.

Fix

Related Identifiers

CVE-1999-1501

Affected Products

Sgi Os2 Irix

References · 4

• http://securityfocus.com/bid/71 · Vendor Advisory
• http://securityfocus.com/bid/70 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-1999-1501 · Security Note
• http://marc.info/?l=bugtraq&m=89217373930054&w=2 · Note