CVE-1999-1384

Name of the Vulnerable Software and Affected Versions SGI system tour package (systour) versions 5.x through 6.3

Description The issue allows local users to gain root privileges via a Trojan horse .exitops program. This program is called by the inst command, which is executed by the RemoveSystemTour program.

Recommendations For SGI system tour package (systour) versions 5.x through 6.3, consider removing or restricting access to the .exitops program to prevent exploitation until a fix is available.