CVE-1999-1410
IRIX 5.3 and 6.2 - Arbitrary File Overwrite and Privilege Escalation via Symlink Attack on Temporary File
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-1999-1410. PoCs published by Jaechul Choe.
AI-analyzed exploit summary This exploit targets a race condition in SGI IRIX's /usr/lib/netaddpr utility, allowing privilege escalation to root by replacing a temporary file with a symbolic link to /.rhosts. The PoC compiles a C program to exploit the vulnerability and repeatedly attempts the attack.
Description
addnetpr in IRIX 5.3 and 6.2 allows local users to overwrite arbitrary files and possibly gain root privileges via a symlink attack on the printers temporary file.
Exploits (1)
This exploit targets a race condition in SGI IRIX's /usr/lib/netaddpr utility, allowing privilege escalation to root by replacing a temporary file with a symbolic link to /.rhosts. The PoC compiles a C program to exploit the vulnerability and repeatedly attempts the attack.