PT-2002-1421 · Sgi · Irix

Publicado 2002-05-29 · Atualizado 2008-09-11 · CVE-2002-0356

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SGI IRIX versions 6.5.10 and earlier

Description A issue in the XFS filesystem reorganizer allows local users to gain root privileges by overwriting critical system files.

Recommendations For SGI IRIX versions 6.5.10 and earlier, consider restricting access to the fsr xfs reorganizer until a fix is available. As a temporary workaround, limit the ability of local users to overwrite critical system files to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2002-0356

Produtos afetados

Irix

Referências · 4

• http://iss.net/security_center/static/9042.php · Nota
• ftp://patches.sgi.com/support/free/security/advisories/20020504-01-I · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0356 · Nota de Segurança
• http://securityfocus.com/bid/4706 · Nota