CVEvulnerability

CVE-1999-0073

10.0 HIGH Published 1995-10-13 Modified 2026-06-16 Official page ↗
Status
Modified
Published
1995-10-13
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Telnet allows a remote client to specify environment variables including LD_LIBRARY_PATH, allowing an attacker to bypass the normal system libraries and gain root access.

Affected configurations

• sgi irix 5.0 • sgi irix 5.0.1 • sgi irix 5.1 • sgi irix 5.1.1 • sgi irix 5.2 • sgi irix 5.3 • sgi irix 6.0 • sgi irix 6.0.1 • sgi irix 6.1 • sgi irix 6.2 • sgi irix 6.3 • digital osf 1 1.2 • digital osf 1 1.3 • digital osf 1 2.0 • digital osf 1 3.0 • digital osf 1 3.2 • digital unix 3.2g • digital unix 4.0

Related

Referenced by CWE · observed example (1)

  • CWE-642 External Control of Critical State Data weakness

References