SGI IRIX 6.4 – ‘rmail’ Local Privilege Escalation

漏洞ID	1053347	漏洞类型
发布时间	1997-05-07	更新时间	1997-05-07
CVE编号	N/A	CNNVD-ID	N/A
漏洞平台	IRIX	CVSS评分	N/A

|漏洞来源

https://www.exploit-db.com/exploits/19349

|漏洞详情

漏洞细节尚未披露

|漏洞EXP

source: http://www.securityfocus.com/bid/460/info

A vulnerability exists in the rmail utility, included by SGI with it's Irix operating system. By failing to sanity check the contents of an environment variable, arbitrary commands may be executed with gid mail. rmail is used with uucp.


The following example is provided:

setenv LOGNAME blah; command-to-execute

相关推荐: Solaris pluggable authentication module（PAM）,unix_scheme漏洞

Solaris pluggable authentication module（PAM）,unix_scheme漏洞漏洞ID 1105284 漏洞类型缓冲区溢出发布时间 1997-02-25 更新时间 1997-05-13 CVE编号 CVE-1999-…