inpview in SGI IRIX allows local users to execute arbitrary commands via the SUN_TTSESSION_CMD environment variable, which is executed by inpview without dropping privileges.Referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/18894http://securitytracker.com/id?1012894http://www.idefense.com/application/poi/display?id=182&type=vulnerabilitieshttp://secunia.com/advisories/13858http://www.osvdb.org/12915http://www.securityfocus.com/bid/12259
