Every CVE Search/ Get API key

CVE-1999-1286

addnetpr in SGI IRIX 6.2 and earlier allows local users to modify arbitrary files and possibly...

7.2 HighPublic exploit

addnetpr in SGI IRIX 6.2 and earlier allows local users to modify arbitrary files and possibly gain root access via a symlink attack on a temporary file.

Exploit likelihood

0.71%Down 0.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.2

addnetpr in SGI IRIX 6.2 and earlier allows local users to modify arbitrary files and possibly gain root access via a symlink attack on a temporary file.

Record
CVE-1999-1286
CVSS 2.0
7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE List No score

addnetpr in SGI IRIX 6.2 and earlier allows local users to modify arbitrary files and possibly gain root access via a symlink attack on a temporary file.

Record
CVE-1999-1286
Updated
2026-11-02
EUVDEUVD-1999-1267 No score

addnetpr in SGI IRIX 6.2 and earlier allows local users to modify arbitrary files and possibly gain root access via a symlink attack on a temporary file.

Record
EUVD-1999-1267
Updated
2026-11-03
GitHub AdvisoriesGHSA-x5rx-8ccg-vqfm No score

addnetpr in SGI IRIX 6.2 and earlier allows local users to modify arbitrary files and possibly...

addnetpr in SGI IRIX 6.2 and earlier allows local users to modify arbitrary files and possibly gain root access via a symlink attack on a temporary file.

Record
GHSA-x5rx-8ccg-vqfm
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBSGI IRIX 6.2 - '/usr/lib/netaddpr' Local Privilege Escalation1997-05-09

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-1999-1286 is a high vulnerability (CVSS 7.2) in Sgi Irix, published May 9, 1997. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.71%, the 53rd percentile. No source names a fixed version.

References

MoveEnter Open