OSVDB ID: 8558

Title: IRIX sgihelp Root Privilege Escalation

Info

Disclosure
Aug 01, 1994

Discovery
Unknown

Dates

Exploit
Aug 01, 1994

Solution
Unknown

Description

 sgihelp in IRIX contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is due to the insecure use of the system() call function, which may allow any unauthenticated and/or authenticated user to gain access to root privileges resulting in a loss of integrity.

Classification

 Location: Local Access Required
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Public
Disclosure: OSVDB Verified

Solution

 Currently, there are no known workarounds or upgrades to correct this issue. However, SGI has released a patch to address this vulnerability.

Products

Silicon Graphics, Inc.

IRIX

 5.2
5.1

References

Credit

Unknown or Incomplete


Direct URL: http://osvdb.org/8558