# CVE-1999-1183: SGI IRIX remote command execution in System Manager sysmgr GUI

Source: https://junglewise.ai/threats/cve-1999-1183-sgi-irix-remote-command-execution-in-system-manager-sysmgr-gui  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 1998-04-02. Updated: 2026-05-10  
License: CC BY 4.0 with a link back

CVE-1999-1183 · Severity: high · CVSS 7.6 · Published 1998-04-02

A vulnerability in the SGI IRIX System Manager (sysmgr) allows remote attackers to execute unauthorized commands on a target system. This occurs when a user opens a malicious file, often delivered via email, that the system's mail handler incorrectly processes as a legitimate administrative task. Successful exploitation could lead to a full system compromise, allowing an attacker to access sensitive data or disrupt operations.

Technologies: [Sgi Irix](https://junglewise.ai/threats/technologies/irix). Vendors: [Sgi](https://junglewise.ai/threats/vendors/sgi).

## Quick answers

**Is CVE-1999-1183 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-1999-1183 being exploited in the wild.

**How severe is CVE-1999-1183?** High severity, with a CVSS score of 7.6, published 2 April 1998.

**Which products and versions are affected?** Sgi Irix 6.3, 6.4.

**Is there a fix for CVE-1999-1183?** A patch was published on 1998-04-03: SGI released security advisories 19980403-01-PX and 19980403-02-PX. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-1999-1183 attacked?** It is attacked over the network, in an operating system.

**Am I affected by CVE-1999-1183?** Check whether you run Sgi Irix at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability exists in the SGI IRIX System Manager (sysmgr) GUI due to the way it handles specific MIME types. When a user's Mailcap configuration supports 'x-sgi-task' or 'x-sgi-exec' types, the system may automatically execute commands defined in 'runtask' or 'runexec' descriptor files provided by a remote attacker. This is essentially a remote command execution vulnerability triggered by a trojan horse file. An attacker can exploit this by sending a specially crafted file to a user who then opens it with a vulnerable mail client or browser. Patches were released by SGI in 1998 to address this issue.

## Affected products

- SGI IRIX 6.3, 6.4

## Timeline

- 1998-04-02: disclosed
- 1998-04-03: patched: SGI released security advisories 19980403-01-PX and 19980403-02-PX.

## References

- [http://www.iss.net/security_center/static/809.php](http://www.iss.net/security_center/static/809.php)
- [http://www.osvdb.org/8556](http://www.osvdb.org/8556)

## Related threats

- [Vulnerability in (1) diskperf and (2) diskalign in IRIX 6.4 allows local attacker to create arbitrary root owned…](https://junglewise.ai/threats/cve-1999-1492-vulnerability-in-1-diskperf-and-2-diskalign-in-irix-6-4-allows)
- [Vulnerability in (1) diskalign and (2) diskperf in IRIX 6.4 patches 2291 and 2848 allow a local user to create…](https://junglewise.ai/threats/cve-1999-1039-vulnerability-in-1-diskalign-and-2-diskperf-in-irix-6-4-patches)
- [SGI IRIX buffer overflow in xterm and Xaw](https://junglewise.ai/threats/cve-1999-0126-sgi-irix-buffer-overflow-in-xterm-and-xaw)
- [SGI IRIX buffer overflow in printers program](https://junglewise.ai/threats/cve-1999-0108-sgi-irix-buffer-overflow-in-printers-program)
- [SGI IRIX command injection in ipxchk and ipxlink](https://junglewise.ai/threats/cve-1999-1501-sgi-irix-command-injection-in-ipxchk-and-ipxlink)