Description (CNA)
(1) ipxchk and (2) ipxlink in SGI OS2 IRIX 6.3 does not properly clear the IFS environmental variable before executing system calls, which allows local users to execute arbitrary commands.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://marc.info/?l=bugtraq&m=89217373930054&w=2
- http://www.securityfocus.com/bid/70
- http://www.securityfocus.com/bid/71
ADP enrichment
No English description supplied.