mp in SGI IRIX may allow local users to obtain root privileges via the bck.log log file, possibly via a symlink attack. NIST National Vulnerability Database (NVD) -- services.nvd.nist.gov (CVE / CVSS / CPE). {"cve":{"id":"CVE-1999-1398","sourceIdentifier":"cve@mitre.org","published":"1997-05-07T04:00:00.000","lastModified":"2026-06-16T21:50:21.323","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in xfsdump in SGI IRIX may allow local users to obtain root privileges via the bck.log log file, possibly via a symlink attack."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","baseScore":6.2,"accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D792E16B-A1AB-4BCE-9E6E-88C17D4F57CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"30F950B1-7D5F-4CA9-BBEF-E6DB1A28C156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"333103D5-71B8-4DC1-90F7-15F2841955D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8A889C10-0637-4133-AFBD-533C8397BE89"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E292DA15-91BF-4957-9C0F-A69518538BED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:xfs:*:*:*:*:*","matchCriteriaId":"92BF03B6-9CDC-4161-9C1C-3E73582C3D83"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"26309EFA-0991-46B6-9818-F0FBB902D5F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B6A81ED6-CE92-4C10-AA2B-AB9AF573D120"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:xfs:*:*:*:*:*","matchCriteriaId":"D157E1C1-F82B-4FDF-9ADB-5571B75E7D6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"966C1A13-8007-408D-96BE-0DA3BB6CA401"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87602167420921&w=2","source":"cve@mitre.org"},{"url":"http://www.insecure.org/sploits/irix.xfsdump.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/472","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=87602167420921&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.insecure.org/sploits/irix.xfsdump.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/472","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},