Description
Untrusted search path vulnerability in day5datacopier in SGI IRIX 6.2 allows local users to execute arbitrary commands via a modified PATH environment variable that points to a malicious cp program.
References
- sgi-day5datacopier(3316) vdb-entry
- 19970516 Irix and WWW mailing-list
- 8559 vdb-entry