CVE-1999-1384

Опубликовано: 30 окт. 1996

Источник: nvd

CVSS2: 7.2

EPSS Низкий

Описание

Indigo Magic System Tour in the SGI system tour package (systour) for IRIX 5.x through 6.3 allows local users to gain root privileges via a Trojan horse .exitops program, which is called by the inst command that is executed by the RemoveSystemTour program.

Ссылки

ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-96.08.SGI.systour.vul
Patch
Third Party Advisory
US Government Resource
ftp://patches.sgi.com/support/free/security/advisories/19961101-01-I
Patch
Vendor Advisory
http://marc.info/?l=bugtraq&m=87602167420095&w=2
http://www.iss.net/security_center/static/7456.php
http://www.securityfocus.com/bid/470
Exploit
Patch
Vendor Advisory
ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-96.08.SGI.systour.vul
Patch
Third Party Advisory
US Government Resource
ftp://patches.sgi.com/support/free/security/advisories/19961101-01-I
Patch
Vendor Advisory
http://marc.info/?l=bugtraq&m=87602167420095&w=2
http://www.iss.net/security_center/static/7456.php
http://www.securityfocus.com/bid/470
Exploit
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*

Версия до 6.3 (включая)

cpe:2.3:o:sgi:irix:5:*:*:*:*:*:*:*

cpe:2.3:o:sgi:irix:5.0:*:*:*:*:*:*:*

cpe:2.3:o:sgi:irix:5.0.1:*:*:*:*:*:*:*

cpe:2.3:o:sgi:irix:5.1:*:*:*:*:*:*:*

cpe:2.3:o:sgi:irix:5.1.1:*:*:*:*:*:*:*

cpe:2.3:o:sgi:irix:5.2:*:*:*:*:*:*:*

cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*

cpe:2.3:o:sgi:irix:5.3:*:xfs:*:*:*:*:*

cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*

cpe:2.3:o:sgi:irix:6.0.1:*:*:*:*:*:*:*

cpe:2.3:o:sgi:irix:6.0.1:*:xfs:*:*:*:*:*

cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*

cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*

EPSS

Процентиль: 44%

0.00212

Низкий

7.2 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-5g4r-8w5q-c4xj

github

около 3 лет назад