Vulnerability in Cray Unicos
CVE-1999-1468
rdist in various UNIX systems uses popen to execute sendmail, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable.
EPSS: 0.003 (26.7th percentile) — read the EPSS interpretation.
Affected products
- Cray Unicos — versions 6.0, 6.0e, 6.1
- Next — versions 2.0, 2.1
- Sgi Irix — versions 3.3, 3.3.1, 3.3.2
- Sun Sunos — versions 4.0.3, 4.0.3c, 4.1
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (US Government Resource, Patch, Third Party Advisory, x_refsource_CERT, third-party-advisory)