What’s Vulnerable › Vulnerabilities

CVE-1999-1398

Severity: medium (CVSS 6.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 1997-05-07 · updated 2026-06-16

Description

Vulnerability in xfsdump in SGI IRIX may allow local users to obtain root privileges via the bck.log log file, possibly via a symlink attack.

Affected products

Sgi Irix: 5.0, 5.0.1, 5.1, 5.1.1, 5.2, 5.3 (+6)

References

Get alerted when CVE-1999-1398 or the next vulnerability affects your stack