CVE-1999-0073

IRIX - Remote Code Execution via Telnet Environment Variable Injection

Title source: llm
STIX 2.1

Description

Telnet allows a remote client to specify environment variables including LD_LIBRARY_PATH, allowing an attacker to bypass the normal system libraries and gain root access.

Scores

EPSS 0.0027
EPSS Percentile 50.3%

Details

Status published
Products (18)
digital/osf_1 1.2
digital/osf_1 1.3
digital/osf_1 2.0
digital/osf_1 3.0
digital/osf_1 3.2
digital/unix 3.2g
digital/unix 4.0
sgi/irix 5.0
sgi/irix 5.0.1
sgi/irix 5.1
... and 8 more
Published Oct 13, 1995
Tracked Since Feb 18, 2026