inpview in SGI IRIX allows local users to execute arbitrary commands via the SUN_TTSESSION_CMD environment variable, which is executed by inpview without dropping privileges.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Irix |
Sgi |
6.5 (including) |
6.5 (including) |
References