EIP-2026-102329

The exploit leverages an environment variable injection vulnerability in the rmail utility on SGI Irix systems. By setting the LOGNAME environment variable to include arbitrary commands, an attacker can execute those commands with the gid mail.