CVE-1999-1022

CVE-1999-1022 describes a local privilege escalation vulnerability in the serial_ports administrative program within SGI IRIX 4.x and 5.x. This flaw allows local users to gain root privileges by manipulating their PATH environment variable to execute a malicious ls program. With a CVSS score of 6.2 (MEDIUM), the vulnerability requires local access and high attack complexity but can lead to complete compromise of confidentiality, integrity, and availability. While not listed on KEV or Hot Lists, an exploit for this vulnerability is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.