Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-1999-1120 — Irix vulnerability

4 documents4 sources

Severity

4.6MEDIUMNVD

EPSS

0.5%

top 32.73%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

SGI Irix

Timeline

PublishedJan 4

Latest updateMay 3

Description

netprint in SGI IRIX 6.4 and earlier trusts the PATH environmental variable for finding and executing the disable program, which allows local users to gain privileges.

CVSS vector

AV:L/AC:L/C:P/I:P/A:PExploitability: 3.9 | Impact: 6.4

Affected Packages1 packages

▶NVDsgi/irix6.4+6

Patches

Patch: patches.sgi.com ↗Patch: www.securityfocus.com ↗Patch: patches.sgi.com ↗

🔴Vulnerability Details

GHSA

GHSA-83rr-9jf8-f8mr: netprint in SGI IRIX 6↗2022-05-03

▶

CVEList

CVE-1999-1120: netprint in SGI IRIX 6↗2002-03-09

▶

💥Exploits & PoCs

Exploit-DB

SGI IRIX 6.4 - 'netprint' Local Privilege Escalation↗1997-01-04

▶