PT-2002-2509 · Sgi · Irix

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-1787

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SGI IRIX versions 6.5 through 6.5.17

Description A buffer overflow issue in the uux component of the eoe.sw.uucp package allows local users to execute arbitrary code. The specific attack vectors used to exploit this issue are not detailed.

Recommendations For SGI IRIX versions 6.5 through 6.5.17, consider restricting access to the uux component until a fix is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2002-1787

Produtos afetados

Irix

Referências · 5

• http://securityfocus.com/bid/5892 · Correção
• http://ciac.org/ciac/bulletins/n-004.shtml · Aviso do Fabricante
• ftp://patches.sgi.com/support/free/security/advisories/20020903-02-P · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-1787 · Nota de Segurança
• http://iss.net/security_center/static/10274.php · Correção