Lucene search

K
cve[email protected]CVE-2005-0113
HistoryJan 19, 2005 - 5:00 a.m.

CVE-2005-0113

2005-01-1905:00:00
web.nvd.nist.gov
25
sgi
irix
inpview
local users
arbitrary commands
security vulnerability

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.9%

inpview in SGI IRIX allows local users to execute arbitrary commands via the SUN_TTSESSION_CMD environment variable, which is executed by inpview without dropping privileges.

Affected configurations

NVD
Node
sgiirixMatch6.5
CPENameOperatorVersion
sgi:irixsgi irixeq6.5

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.9%

Related for CVE-2005-0113