A vulnerability classified as critical was found in SGI IRIX up to 6.3 (Operating System). Affected by this vulnerability is some unknown functionality of the component Indigo Magic System Tour/Systour. The manipulation with an unknown input leads to a local privilege escalation vulnerability. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

indigo magic system tour in the sgi system tour package (systour) for irix 5.x through 6.3 allows local users to gain root privileges via a trojan horse .exitops program which is called by the inst command that is executed by the removesystemtour program.

The weakness was released 10/30/1996 by Tun-Hui Hu as confirmed posting (Bugtraq). It is possible to read the advisory at marc.theaimsgroup.com. This vulnerability is known as CVE-1999-1384. The exploitation appears to be easy. Attacking locally is a requirement. The exploitation doesn't need any form of authentication. Technical details are unknown but a public exploit is available.

It is possible to download the exploit at exploit-db.com. It is declared as proof-of-concept.

Upgrading to version 6.4 or 6.5 eliminates this vulnerability.

The vulnerability is also documented in the databases at X-Force (7456), Exploit-DB (19356) and SecurityFocus (BID 470†).

Productinfo

Type

• Operating System

Vendor

• SGI

Name

• IRIX

Version

• 5
• 5.0
• 5.0.1
• 5.1
• 5.1.1
• 5.2
• 5.3
• 6.0
• 6.0.1
• 6.1
• 6.2
• 6.3

License

• commercial

Support

• end of life (old version)

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion