Exploitation Summary
EIP tracks 1 public exploit for CVE-1999-1461. PoCs published by Yuri Volobuev.
AI-analyzed exploit summary This exploit leverages a path traversal vulnerability in the setuid root utility 'inpview' on SGI Irix systems. By manipulating the PATH environment variable and placing a malicious 'ttsession' script in /tmp, an attacker can execute arbitrary commands as root.
Description
inpview in InPerson on IRIX 5.3 through IRIX 6.5.10 trusts the PATH environmental variable to find and execute the ttsession program, which allows local users to obtain root access by modifying the PATH to point to a Trojan horse ttsession program.
Exploits (1)
This exploit leverages a path traversal vulnerability in the setuid root utility 'inpview' on SGI Irix systems. By manipulating the PATH environment variable and placing a malicious 'ttsession' script in /tmp, an attacker can execute arbitrary commands as root.