CVE-1999-1022: Sgi Irix

Medium severity, CVSS 6.2. EPSS: 0.8% chance of exploitation in the next 30 days.

serial_ports administrative program in IRIX 4.x and 5.x trusts the user's PATH environmental variable to find and execute the ls program, which allows local users to gain root privileges via a Trojan horse ls program.

Affected products

• Sgi Irix: version 4 only; version 5.2 only; version 5.3 only

Published 1994-10-02. Last modified 2026-06-16.