PT-2002-1284 · Xinet · Xinet K-Ashare

Publicado 2002-05-16 · Atualizado 2016-10-18 · CVE-2002-0213

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Xinet K-AShare version 0.011.01 for IRIX

Description The issue allows local users to read arbitrary files via a symlink attack on the VOLICON file, which is copied to the .HSicon file in a shared directory.

Recommendations For Xinet K-AShare version 0.011.01, consider restricting access to the VOLICON file to prevent symlink attacks until a patch is available. As a temporary workaround, avoid using the shared directory feature that copies the VOLICON file to the .HSicon file.

Correção

Identificadores relacionados

CVE-2002-0213

Produtos afetados

Xinet K-Ashare

Referências · 5

• ftp://patches.sgi.com/support/free/security/advisories/20020604-01-I · Aviso do Fabricante
• http://iss.net/security_center/static/8002.php · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=101223525118717&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0213 · Nota de Segurança
• http://securityfocus.com/bid/3969 · Nota