CVE-1999-1120 EXPLOIT
4.6
MEDIUM · CVSS 2.0 · EPSS 0.8% (pctl 57)
Patch early
A public exploit exists.
Description
netprint in SGI IRIX 6.4 and earlier trusts the PATH environmental variable for finding and executing the disable program, which allows local users to gain privileges.
Scoring
| CVSS | 4.6 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:L/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 0.85% — more likely to be exploited than 57% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 1997-01-04 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| sgi | irix |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | SGI IRIX 6.4 - 'netprint' Local Privilege Escalation | 1997-01-04 |
References
- ftp://patches.sgi.com/support/free/security/advisories/19961203-01-PX
- ftp://patches.sgi.com/support/free/security/advisories/19961203-02-PX
- http://marc.info/?l=bugtraq&m=87602167420403&w=2
- http://www.osvdb.org/993
- http://www.securityfocus.com/bid/395
- https://exchange.xforce.ibmcloud.com/vulnerabilities/2107
- ftp://patches.sgi.com/support/free/security/advisories/19961203-01-PX
- ftp://patches.sgi.com/support/free/security/advisories/19961203-02-PX
- http://marc.info/?l=bugtraq&m=87602167420403&w=2
- http://www.osvdb.org/993
- http://www.securityfocus.com/bid/395
- https://exchange.xforce.ibmcloud.com/vulnerabilities/2107
→ the Explorer · watch your stack · NVD