PT-2005-1525 · Sgi · Sgi Irix

Publicado 2005-04-08 · Atualizado 2008-09-05 · CVE-2005-0465

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SGI IRIX (affected versions not specified)

Description The issue concerns the gr osview component in SGI IRIX, which fails to drop privileges before opening files. This allows local users to overwrite arbitrary files using the -s option.

Recommendations For SGI IRIX, consider restricting access to the gr osview component until a fix is available. As a temporary workaround, avoid using the -s option with gr osview to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Identificadores relacionados

CVE-2005-0465

Produtos afetados

Sgi Irix

Referências · 6

• 🔥 https://exploit-db.com/exploits/25362 · Exploit
• 🔥 http://idefense.com/application/poi/display?id=225&type=vulnerabilities · Exploit
• ftp://patches.sgi.com/support/free/security/advisories/20050402-01-P · Correção, Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-0465 · Nota de Segurança
• http://secunia.com/advisories/14875 · Nota
• http://securitytracker.com/id?1013662 · Nota