CVE-1999-1120

Medium

Published: 04/01/1997(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.85%

53th percentile - higher than 53% of all known CVEs

Summary

The netprint program in SGI IRIX 6.4 and earlier versions trusts the PATH environmental variable for finding and executing the disable program, allowing local users to gain privileges.

Risk Assessment

Local users may exploit this vulnerability to gain elevated privileges in the system, posing a serious security threat.

Recommendation

It is recommended to limit trust in the PATH variable and implement appropriate access controls for the disable program.

Original NVD description (English source)

netprint in SGI IRIX 6.4 and earlier trusts the PATH environmental variable for finding and executing the disable program, which allows local users to gain privileges.