CVE

Id
1002  
CVE No.
CVE-1999-1022  
Status
Candidate  
Description
serial_ports administrative program in IRIX 4.x and 5.x trusts the user"s PATH environmental variable to find and execute the ls program, which allows local users to gain root privileges via a Trojan horse ls program.  
Phase
Proposed (20010912)  
Votes
ACCEPT(2) Cole, Frech | NOOP(2) Christey, Foat  
Comments
Christey> Note: CVE-1999-1310 is a duplicate of this candidate. | CVE-1999-1310 will be REJECTed; this is the proper CAN to use. | | CIAC:F-01 | URL:http://ciac.llnl.gov/ciac/bulletins/f-01.shtml | SGI:19941001-01-P | URL:ftp://patches.sgi.com/support/free/security/advisories/19941001-01-P | MISC:http://www.netsys.com/firewalls/firewalls-9410/0019.html  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
2467 1002 CVE-1999-1022 BUGTRAQ:19941002  View
2468 1002 CVE-1999-1022 URL:http://www.securityfocus.com/archive/1/930  View
2469 1002 CVE-1999-1022 XF:sgi-serialports(2111)  View
2470 1002 CVE-1999-1022 URL:http://xforce.iss.net/static/2111.php  View
2471 1002 CVE-1999-1022 BID:464  View

Related JVN