| CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
|---|---|---|
| 8.4 | $0-$5k | 0.00 |
Summary
A vulnerability has been found in SGI IRIX and classified as problematic. Affected is an unknown function of the component ordist Command. Performing a manipulation results in memory corruption. This vulnerability is reported as CVE-1999-0029. Moreover, an exploit is present. The affected component should be upgraded.
Details
A vulnerability was found in SGI IRIX (Operating System) (the affected version unknown). It has been classified as critical. This affects an unknown part of the component ordist Command. The manipulation with an unknown input leads to a memory corruption vulnerability. CWE is classifying the issue as CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:
root privileges via buffer overflow in ordist command on sgi irix systems.
The weakness was disclosed 07/16/1997. This vulnerability is uniquely identified as CVE-1999-0029. The exploitability is told to be easy. Attacking locally is a requirement. No form of authentication is needed for exploitation. Technical details are unknown but a public exploit is available.
The exploit is shared for download at exploit-db.com. It is declared as proof-of-concept.
Upgrading eliminates this vulnerability.
The vulnerability is also documented in the databases at X-Force (444), Exploit-DB (19317) and Vulnerability Center (SBV-657†). The entries VDB-13948, VDB-13946, VDB-13945 and VDB-13944 are pretty similar. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Product
Type
Vendor
Name
License
Website
- Vendor: http://www.sgi.com/
CPE 2.3
CPE 2.2
CVSSv4
VulDB Vector: 🔍VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 8.7VulDB Meta Temp Score: 8.4
VulDB Base Score: 9.3
VulDB Temp Score: 8.4
VulDB Vector: 🔍
VulDB Reliability: 🔍
CNA Base Score: 8.4
CNA Vector: 🔍
ADP CISA Base Score: 8.4
ADP CISA Vector: 🔍
CVSSv2
| AV | AC | Au | C | I | A |
|---|---|---|---|---|---|
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
|---|---|---|---|---|---|
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Class: Memory corruptionCWE: CWE-119
CAPEC: 🔍
ATT&CK: 🔍
Physical: Partially
Local: Yes
Remote: No
Availability: 🔍
Access: Public
Status: Proof-of-Concept
Download: 🔍
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
| 0-Day | Unlock | Unlock | Unlock | Unlock |
|---|---|---|---|---|
| Today | Unlock | Unlock | Unlock | Unlock |
Exploit-DB: 🔍
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: UpgradeStatus: 🔍
0-Day Time: 🔍
Timeline
05/24/1997 🔍07/16/1997 🔍
07/16/1997 🔍
01/19/2003 🔍
06/18/2014 🔍
04/16/2026 🔍
Sources
Vendor: sgi.comStatus: Confirmed
CVE: CVE-1999-0029 (🔍)
GCVE (CVE): GCVE-0-1999-0029
GCVE (VulDB): GCVE-100-13947
X-Force: 444
Vulnerability Center: 657 - Buffer Overflow in Ordist Command on SGI IRIX, Medium
scip Labs: https://www.scip.ch/en/?labs.20161013
See also: 🔍
Entry
Created: 06/18/2014 12:56Updated: 04/16/2026 22:43
Changes: 06/18/2014 12:56 (37), 05/08/2019 06:54 (16), 08/02/2024 00:39 (27), 08/23/2024 23:52 (12), 04/16/2026 22:43 (12)
Complete: 🔍
Cache ID: 216::103
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
No comments yet. Languages: en.
Please log in to comment.