PT-2003-1250 · Sgi · Irix

Publicado 2003-04-02 · Atualizado 2008-09-05 · CVE-2002-1517

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IRIX version 6.5

Description The issue allows local users to conduct unauthorized file activities via a symlink attack, possibly by exploiting the .fsrlast file.

Recommendations For IRIX version 6.5, consider restricting access to the fsr efs functionality to minimize the risk of exploitation. As a temporary workaround, avoid using the .fsrlast file until a patch is available.

Correção

Identificadores relacionados

CVE-2002-1517

Produtos afetados

Irix

Referências · 9

• ftp://patches.sgi.com/support/free/security/advisories/20020903-02-P · Aviso do Fabricante
• http://securityfocus.com/bid/5897 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-1517 · Nota de Segurança
• http://ciac.org/ciac/bulletins/n-004.shtml · Aviso do Fabricante
• ftp://patches.sgi.com/support/free/security/advisories/20021103-02-P · Aviso do Fabricante
• http://osvdb.org/8579 · Nota
• ftp://patches.sgi.com/support/free/security/advisories/20020903-01-P · Aviso do Fabricante
• http://iss.net/security_center/static/10275.php · Aviso do Fabricante
• ftp://patches.sgi.com/support/free/security/advisories/20021103-01-P · Aviso do Fabricante