medium6.2Public exploit code
CVE-1999-1398
Vulnerability in xfsdump in SGI IRIX may allow local users to obtain root privileges via the bck.log log file, possibly via a symlink attack.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SGI IRIX 6.4 - 'xfsdump' Local Privilege Escalation1997-05-07 · local · irix · Verified
Impact
Vulnerability in xfsdump in SGI IRIX may allow local users to obtain root privileges via the bck.log log file, possibly via a symlink attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sgi | Irix | Versions 5.0, 5.0.1, 5.1, 5.1.1, 5.2, 5.3 |