EIP-2026-102325

This is a writeup describing a vulnerability in SGI's Irix 5.x chost and cimport programs, which fail to validate the real userid, allowing any user to edit protected files like /etc/passwd. The steps outline how to exploit this to gain root access via the desktopManager.