Exploitation Summary
EIP tracks 1 public exploit for CVE-1999-1399. PoCs published by J.A. Guitierrez.
AI-analyzed exploit summary This exploit leverages a command injection vulnerability in the SpaceBall game on Irix 6.2 by manipulating the $HOSTNAME environment variable to execute arbitrary commands, leading to privilege escalation by creating a setuid root shell.
Description
spaceball program in SpaceWare 7.3 v1.0 in IRIX 6.2 allows local users to gain root privileges by setting the HOSTNAME environmental variable to contain the commands to be executed.
Exploits (1)
This exploit leverages a command injection vulnerability in the SpaceBall game on Irix 6.2 by manipulating the $HOSTNAME environment variable to execute arbitrary commands, leading to privilege escalation by creating a setuid root shell.