Description
(1) ipxchk and (2) ipxlink in SGI OS2 IRIX 6.3 does not properly clear the IFS environmental variable before executing system calls, which allows local users to execute arbitrary commands.
References
- 19980408 SGI O2 ipx security issue mailing-list
- 70 vdb-entry
- 71 vdb-entry