CVEvulnerability

CVE-1999-1022

6.2 MEDIUM Published 1994-10-02 Modified 2026-06-16 Official page ↗
Status
Modified
Published
1994-10-02
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.2 MEDIUM — AV:L/AC:H/Au:N/C:C/I:C/A:C

Description

serial_ports administrative program in IRIX 4.x and 5.x trusts the user's PATH environmental variable to find and execute the ls program, which allows local users to gain root privileges via a Trojan horse ls program.

Affected configurations

• sgi irix 4 • sgi irix 5.2 • sgi irix 5.3

References