Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-1999-0036 — Unrestricted File Upload in Irix

CWE-434 — Unrestricted File Upload5 documents4 sources
Severity
8.4HIGHNVD
EPSS
0.8%
top 25.36%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
SGI Irix
Timeline
PublishedMay 26
Latest updateMay 3

Description

IRIX login program with a nonzero LOCKOUT parameter allows creation or damage to files.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 2.5 | Impact: 5.9

Affected Packages1 packages

▶NVDsgi/irix8 versions+7

🔴Vulnerability Details

2
GHSA
GHSA-jr54-rrhq-w6j3: IRIX login program with a nonzero LOCKOUT parameter allows creation or damage to files↗2022-05-03
▶
CVEList
CVE-1999-0036: IRIX login program with a nonzero LOCKOUT parameter allows creation or damage to files↗1999-09-29
▶

💥Exploits & PoCs

2
Exploit-DB
SGI IRIX - '/bin/login' Local Buffer Overflow↗1997-05-26
▶
Exploit-DB
SGI IRIX 6.4 - 'login' Local Privilege Escalation↗1997-05-26
▶
CVE-1999-0036 — Unrestricted File Upload in SGI Irix | cvebase