medium6.2Public exploit code
CVE-1999-1022
serial_ports administrative program in IRIX 4.x and 5.x trusts the user's PATH environmental variable to find and execute the ls program, which allows local us…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SGI IRIX 5.2/5.3 - 'serial_ports' Local Privilege Escalation1994-02-02 · local · irix · Verified
Impact
serial_ports administrative program in IRIX 4.x and 5.x trusts the user's PATH environmental variable to find and execute the ls program, which allows local users to gain root privileges via a Trojan horse ls program.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sgi | Irix | Versions 4, 5.2, 5.3 |