CVE-2003-0177
SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, does not follow "-" entries in the /etc/group file, which may cause subsequent group membership entries to be processed inadvertently.
Date published : 2003-08-18
ftp://patches.sgi.com/support/free/security/advisories/20030701-01-P