CVE-1999-0036

Description

IRIX login program with a nonzero LOCKOUT parameter allows creation or damage to files.

CVSS breakdown

Affected products

• sgi / irix5.1 – 5.1
• sgi / irix5.2 – 5.2
• sgi / irix5.3 – 5.3
• sgi / irix6.0 – 6.0
• sgi / irix6.1 – 6.1
• sgi / irix6.2 – 6.2
• sgi / irix6.3 – 6.3
• sgi / irix6.4 – 6.4

Exploits & proofs of concept

• exploit-dbSGI IRIX 6.4 - 'login' Local Privilege Escalationby David Hedley
• exploit-dbSGI IRIX - '/bin/login' Local Buffer Overflowby David Hedley

References

• MISChttp://www.osvdb.org/990
• MISChttp://www.ciac.org/ciac/bulletins/h-106.shtml
• VENDOR_ADVISORYftp://patches.sgi.com/support/free/security/advisories/19970508-02-PX
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/557