CVE-1999-1461

CVE-1999-1461 describes a local privilege escalation vulnerability in the inpview program within SGI IRIX versions 5.3 through 6.5.10. The vulnerability arises because inpview insecurely relies on the PATH environment variable to locate and execute ttsession. An attacker can exploit this by manipulating the PATH to point to a malicious ttsession program, thereby gaining root access. This high-severity vulnerability (CVSS 7.2) is easily exploitable locally with low attack complexity, leading to complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, a public exploit is available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.