Description
inpview in SGI IRIX allows local users to execute arbitrary commands via the SUN_TTSESSION_CMD environment variable, which is executed by inpview without dropping privileges.
References
- irix-inpview-gain-privileges(18894) vdb-entry
- 1012894 vdb-entry
- 20050113 SGI IRIX inpview Design Error Vulnerability third-party-advisory
- 13858 third-party-advisory
- 12915 vdb-entry
- 12259 vdb-entry