
CVE-1999-0959 – SGI IRIX 6.4 - 'startmidi' Local Privilege Escalation
https://notcve.org/view.php?id=CVE-1999-0959
01 Feb 1997 — IRIX startmidi program allows local users to modify arbitrary files via a symlink attack. • https://www.exploit-db.com/exploits/19355 •

CVE-1999-0049
https://notcve.org/view.php?id=CVE-1999-0049
08 Jan 1997 — Csetup under IRIX allows arbitrary file creation or overwriting. • https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0049 •

CVE-1999-0051 – SGI IRIX 5.3/6.2 / SGI license_oeo 1.0 LicenseManager - 'NETLS_LICENSE_FILE' Local Privilege Escalation
https://notcve.org/view.php?id=CVE-1999-0051
06 Jan 1997 — Arbitrary file creation and program execution using FLEXlm LicenseManager, from versions 4.0 to 5.0, in IRIX. • https://www.exploit-db.com/exploits/19066 •

CVE-1999-1120 – SGI IRIX 6.4 - 'netprint' Local Privilege Escalation
https://notcve.org/view.php?id=CVE-1999-1120
04 Jan 1997 — netprint in SGI IRIX 6.4 and earlier trusts the PATH environmental variable for finding and executing the disable program, which allows local users to gain privileges. • https://www.exploit-db.com/exploits/19313 •

CVE-1999-1401
https://notcve.org/view.php?id=CVE-1999-1401
05 Dec 1996 — Vulnerability in Desktop searchbook program in IRIX 5.0.x through 6.2 sets insecure permissions for certain user files (iconbook and searchbook). • ftp://patches.sgi.com/support/free/security/advisories/19961201-01-PX •

CVE-1999-0044 – SGI IRIX 6.2 - 'fsdump' Local Privilege Escalation
https://notcve.org/view.php?id=CVE-1999-0044
03 Dec 1996 — fsdump command in IRIX allows local users to obtain root access by modifying sensitive files. • https://www.exploit-db.com/exploits/19280 •

CVE-1999-1384 – SGI IRIX 6.3 - 'Systour' / 'OutOfBox' Local Privilege Escalation
https://notcve.org/view.php?id=CVE-1999-1384
30 Oct 1996 — Indigo Magic System Tour in the SGI system tour package (systour) for IRIX 5.x through 6.3 allows local users to gain root privileges via a Trojan horse .exitops program, which is called by the inst command that is executed by the RemoveSystemTour program. • https://www.exploit-db.com/exploits/19356 •

CVE-1999-0032 – BSD/OS 2.1 / FreeBSD 2.1.5 / NeXTstep 4.x / IRIX 6.4 / SunOS 4.1.3/4.1.4 - '/usr/bin/lpr' Buffer Overrun Privilege Escalation
https://notcve.org/view.php?id=CVE-1999-0032
25 Oct 1996 — Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option. • https://www.exploit-db.com/exploits/19545 •

CVE-1999-0022
https://notcve.org/view.php?id=CVE-1999-0022
03 Jul 1996 — Local user gains root privileges via buffer overflow in rdist, via expstr() function. • http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/179 • CWE-125: Out-of-bounds Read •

CVE-1999-0019
https://notcve.org/view.php?id=CVE-1999-0019
24 Apr 1996 — Delete or create a file via rpc.statd, due to invalid information. • http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/135 •