Vulnerabilities > CVE-1999-1461 - Unspecified vulnerability in SGI Irix

047910
CVSS 7.2 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
local
low complexity
sgi
exploit available

Summary

inpview in InPerson on IRIX 5.3 through IRIX 6.5.10 trusts the PATH environmental variable to find and execute the ttsession program, which allows local users to obtain root access by modifying the PATH to point to a Trojan horse ttsession program.

Vulnerable Configurations

Part Description Count
OS
Sgi
6

Exploit-Db

descriptionSGI IRIX 6.4 inpview Vulnerability. CVE-1999-1461 . Local exploit for irix platform
idEDB-ID:19304
last seen2016-02-02
modified1997-05-07
published1997-05-07
reporterYuri Volobuev
sourcehttps://www.exploit-db.com/download/19304/
titleSGI IRIX <= 6.4 inpview Vulnerability