## Description

rdist in various UNIX systems uses popen to execute sendmail, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### next - next

Affected Versions:

- 2.0

### next - next

Affected Versions:

- 2.1

### sgi - irix

Affected Versions:

- 3.3

### sgi - irix

Affected Versions:

- 3.3.1

### sgi - irix

Affected Versions:

- 3.3.2

### sgi - irix

Affected Versions:

- 3.3.3

### sgi - irix

Affected Versions:

- 4.0

### cray - unicos

Affected Versions:

- 6.0

### cray - unicos

Affected Versions:

- 6.0e

### cray - unicos

Affected Versions:

- 6.1

### sun - sunos

Affected Versions:

- 4.0.3

### sun - sunos

Affected Versions:

- 4.0.3c

### sun - sunos

Affected Versions:

- 4.1

### sun - sunos

Affected Versions:

- 4.1.1

### sun - sunos

Affected Versions:

- 4.1psr_a

## References

- http://www.alw.nih.gov/Security/8lgm/8lgm-Advisory-01.html
- http://www.cert.org/advisories/CA-91.20.rdist.vulnerability
  Patch Third Party Advisory US Government Resource
- http://www.iss.net/security_center/static/7160.php
- http://www.osvdb.org/8106
- http://www.securityfocus.com/bid/31
  Patch Vendor Advisory
- http://www.alw.nih.gov/Security/8lgm/8lgm-Advisory-01.html
- http://www.cert.org/advisories/CA-91.20.rdist.vulnerability
  Patch Third Party Advisory US Government Resource
- http://www.iss.net/security_center/static/7160.php
- http://www.osvdb.org/8106
- http://www.securityfocus.com/bid/31
  Patch Vendor Advisory

Neural Processor Active