• info
• discussion
• exploit
• solution
• references

SGI IRIX Mail Core Dump Vulnerability

IRIX is the Unix derivative operating system distributed and maintained by SGI.

Under some circumstances, it may be possible for a local user to force the mail program to core dump. This problem is likely due to a buffer overflow. As the mail program is typically a setgid mail executable, this could lead to a local privilege elevation.