CVE-1999-1501

Medium

Published: 08/04/1998(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

30th percentile - higher than 30% of all known CVEs

Summary

The ipxchk and ipxlink programs in SGI OS2 IRIX 6.3 do not properly clear the IFS environmental variable before executing system calls, allowing local users to execute arbitrary commands.

Risk Assessment

Local users can exploit this vulnerability to run unauthorized commands, posing a significant security risk to the system.

Recommendation

It is recommended to update the system to a newer version that addresses the management of environmental variables before executing system calls.

Original NVD description (English source)

(1) ipxchk and (2) ipxlink in SGI OS2 IRIX 6.3 does not properly clear the IFS environmental variable before executing system calls, which allows local users to execute arbitrary commands.