PT-2002-2508 · Sgi · Sgi Irix

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-1786

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions SGI IRIX versions 6.5 through 6.5.14

Description The issue allows local users to read core dumps and possibly obtain sensitive information because SGI IRIX applies a umask of 022 to root core dumps.

Recommendations For SGI IRIX versions 6.5 through 6.5.14, consider changing the umask applied to root core dumps to a more restrictive setting to prevent unauthorized access.

Correção

Identificadores relacionados

CVE-2002-1786

Produtos afetados

Sgi Irix

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-1786 · Nota de Segurança
• http://iss.net/security_center/static/10138.php · Correção
• http://securityfocus.com/bid/5737 · Correção
• ftp://patches.sgi.com/support/free/security/advisories/20020902-01-I · Aviso do Fabricante