Vulnerability Description
netprint in SGI IRIX 6.4 and earlier trusts the PATH environmental variable for finding and executing the disable program, which allows local users to gain privileges.
CVSS Score
4.6
MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sgi | Irix | <= 6.4 |
References
- ftp://patches.sgi.com/support/free/security/advisories/19961203-01-PX
- ftp://patches.sgi.com/support/free/security/advisories/19961203-02-PXPatchVendor Advisory
- http://marc.info/?l=bugtraq&m=87602167420403&w=2
- http://www.osvdb.org/993
- http://www.securityfocus.com/bid/395ExploitPatchVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/2107
- ftp://patches.sgi.com/support/free/security/advisories/19961203-01-PX
- ftp://patches.sgi.com/support/free/security/advisories/19961203-02-PXPatchVendor Advisory
- http://marc.info/?l=bugtraq&m=87602167420403&w=2
- http://www.osvdb.org/993
- http://www.securityfocus.com/bid/395ExploitPatchVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/2107
FAQ
What is CVE-1999-1120?
CVE-1999-1120 is a vulnerability with a CVSS score of 4.6 (MEDIUM). netprint in SGI IRIX 6.4 and earlier trusts the PATH environmental variable for finding and executing the disable program, which allows local users to gain privileges.
How severe is CVE-1999-1120?
CVE-1999-1120 has been rated MEDIUM with a CVSS base score of 4.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-1999-1120?
Check the references section above for vendor advisories and patch information. Affected products include: Sgi Irix.