7.2
CVSSv2

CVE-1999-0027

Published: 16/07/1997 Updated: 17/08/2022
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
VMScore: 735
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

root privileges via buffer overflow in eject command on SGI IRIX systems.

Vulnerable Product Search on Vulmon Subscribe to Product

sgi irix

Exploits

source: wwwsecurityfocuscom/bid/351/info A vulnerability exists in the eject program shipped with Irix 62 from Silicon Graphics By supplying a long argument to the eject program, it is possible to overwrite the return address on the stack, and execute arbitrary code as root Eject is normally used to eject removeable media from the syst ...
/* copyright by */ /* Last Stage of Delirium, Dec 1996, Poland*/ #include <stdioh> #include <stdlibh> #include <fcntlh> #define BUFSIZE 2068 #define OFFS 800 #define ADDRS 3 #define ALIGN 0 #define ALIGN2 4 char asmcode[]="\x3c\x18\x2f\x62\x37\x18\x69\x6e\x3c\x19\x2f\x73\x37\x39\x68\x2e\xaf\xb8\xff\xf8\xaf\xb9\xff\xfc\xa3\xa ...
source: wwwsecurityfocuscom/bid/351/info A vulnerability exists in the eject program shipped with Irix 62 from Silicon Graphics By supplying a long argument to the eject program, it is possible to overwrite the return address on the stack, and execute arbitrary code as root Eject is normally used to eject removeable media from the sys ...