CVE-1999-1116

CVSS 2.0 Score 7.2 of 10 (high)

Details

Published May 3, 1997
Updated: Nov 20, 2024

Summary

CVE-1999-1116 is a vulnerability affecting the Indigo Magic System Administration subsystem in SGI IRIX 6.3 and 6.4. This issue permits local users to exploit a flaw in the runpriv function, ultimately allowing them to elevate their privileges and obtain root access. By exploiting this vulnerability, attackers can gain unrestricted control over the system, posing a significant risk to the confidentiality, integrity, and availability of sensitive data. This vulnerability underscores the importance of keeping software up-to-date and implementing robust access control measures to protect against local privilege escalation attacks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • SGI IRAX

Affected Vendors

  • Saskatchewan Government Insurance