CVE-1999-1461

CVSS 2.0 Score 7.2 of 10 (high)

Details

Published May 7, 1997
Updated: Nov 20, 2024

Summary

CVE-1999-1461 is a vulnerability affecting the InPerson software on IRIX 5.3 to IRIX 6.5.10. The issue lies in the inpview component, which mistakenly trusts the PATH environmental variable to locate and run the ttsession program. Malicious users can exploit this by manipulating the PATH to instead point to a malicious ttsession program, effectively granting them root access to the system.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • SGI IRAX

Affected Vendors

  • Saskatchewan Government Insurance