Exploitation Summary
EIP tracks 1 public exploit for CVE-1999-1286.
AI-analyzed exploit summary This exploit leverages a race condition in SGI IRIX's /usr/lib/netaddpr utility, which is setuid root. The script creates a symbolic link to a sensitive file (e.g., /.rhosts) during the window between file creation and opening, allowing privilege escalation to root.
Description
addnetpr in SGI IRIX 6.2 and earlier allows local users to modify arbitrary files and possibly gain root access via a symlink attack on a temporary file.
Exploits (1)
This exploit leverages a race condition in SGI IRIX's /usr/lib/netaddpr utility, which is setuid root. The script creates a symbolic link to a sensitive file (e.g., /.rhosts) during the window between file creation and opening, allowing privilege escalation to root.