CVE-1999-1468

rdist in various UNIX systems uses popen to execute sendmail, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable.

🔗 References (10)

• cve@mitrehttp://www.alw.nih.gov/Security/8lgm/8lgm-Advisory-01.html
• cve@mitrehttp://www.cert.org/advisories/CA-91.20.rdist.vulnerability
• cve@mitrehttp://www.iss.net/security_center/static/7160.php
• cve@mitrehttp://www.osvdb.org/8106
• cve@mitrehttp://www.securityfocus.com/bid/31
• af854a3a-2127-422b-91ae-364da2661108http://www.alw.nih.gov/Security/8lgm/8lgm-Advisory-01.html
• af854a3a-2127-422b-91ae-364da2661108http://www.cert.org/advisories/CA-91.20.rdist.vulnerability
• af854a3a-2127-422b-91ae-364da2661108http://www.iss.net/security_center/static/7160.php
• af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/8106
• af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/31