Unauthorized users can elevate their privileges to root.
Affected sites should install this fix as soon as possible. This will remove the vulnerability. Since this program is used only to configure the serial ports on an IRIX 4.X system, changing the permissions will not affect any functionality of the system involved. This program is not used in IRIX Version 5.X, but the vulnerability may be present if the method used to upgrade from Version 4.X did not remove the file. SGI has requested that CIAC include their internal Advisory number for this vulnerability to assist anyone contacting them.