CVE Vulnerabilities

CVE-1999-1022

Published: Oct 02, 1994 | Modified: Dec 19, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.2 MEDIUM
AV:L/AC:H/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

serial_ports administrative program in IRIX 4.x and 5.x trusts the users PATH environmental variable to find and execute the ls program, which allows local users to gain root privileges via a Trojan horse ls program.

Affected Software

Name Vendor Start Version End Version
Irix Sgi 4 (including) 4 (including)
Irix Sgi 5.2 (including) 5.2 (including)
Irix Sgi 5.3 (including) 5.3 (including)

References