7.2

CVE-1999-1461

Exploit

inpview in InPerson on IRIX 5.3 through IRIX 6.5.10 trusts the PATH environmental variable to find and execute the ttsession program, which allows local users to obtain root access by modifying the PATH to point to a Trojan horse ttsession program.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sgi ≫ Irix Version5.3
Sgi ≫ Irix Version6.1
Sgi ≫ Irix Version6.2
Sgi ≫ Irix Version6.3
Sgi ≫ Irix Version6.4
Sgi ≫ Irix Version6.5.10
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.38% 0.561
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
http://www.securityfocus.com/bid/381
Patch
Vendor Advisory
Exploit