CVE-1999-1468

Description

rdist in various UNIX systems uses popen to execute sendmail, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable.

Affected products

• cray / unicos6.0e – 6.0e
• cray / unicos6.0 – 6.0
• cray / unicos6.1 – 6.1
• next / next2.0 – 2.0
• next / next2.1 – 2.1
• sgi / irix3.3.3 – 3.3.3
• sgi / irix4.0 – 4.0
• sgi / irix3.3.2 – 3.3.2
• sgi / irix3.3.1 – 3.3.1
• sgi / irix3.3 – 3.3
• sun / sunos4.0.3 – 4.0.3
• sun / sunos4.0.3c – 4.0.3c
• sun / sunos4.1 – 4.1
• sun / sunos4.1.1 – 4.1.1
• sun / sunos4.1psr_a – 4.1psr_a

References

• MISChttp://www.alw.nih.gov/Security/8lgm/8lgm-Advisory-01.html
• MISChttp://www.securityfocus.com/bid/31
• MISChttp://www.osvdb.org/8106
• MISChttp://www.iss.net/security_center/static/7160.php
• VENDOR_ADVISORYhttp://www.cert.org/advisories/CA-91.20.rdist.vulnerability