Exploitation Summary
EIP tracks 1 public exploit for CVE-1999-1022. PoCs published by transit.
AI-analyzed exploit summary This exploit leverages a race condition in the serial_ports administrative program on SGI Irix 5.x to execute arbitrary commands as root. It creates a malicious 'ls' script in /tmp that copies and sets the SUID bit on /bin/sh, allowing privilege escalation.
Description
serial_ports administrative program in IRIX 4.x and 5.x trusts the user's PATH environmental variable to find and execute the ls program, which allows local users to gain root privileges via a Trojan horse ls program.
Exploits (1)
This exploit leverages a race condition in the serial_ports administrative program on SGI Irix 5.x to execute arbitrary commands as root. It creates a malicious 'ls' script in /tmp that copies and sets the SUID bit on /bin/sh, allowing privilege escalation.