PT-2002-1284 · Xinet · Xinet K-Ashare

Published 2002-05-16 · Updated 2016-10-18 · CVE-2002-0213

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Xinet K-AShare version 0.011.01 for IRIX

Description The issue allows local users to read arbitrary files via a symlink attack on the VOLICON file, which is copied to the .HSicon file in a shared directory.

Recommendations For Xinet K-AShare version 0.011.01, consider restricting access to the VOLICON file to prevent symlink attacks until a patch is available. As a temporary workaround, avoid using the shared directory feature that copies the VOLICON file to the .HSicon file.

Fix

Related Identifiers

CVE-2002-0213

Affected Products

Xinet K-Ashare

References · 5

• ftp://patches.sgi.com/support/free/security/advisories/20020604-01-I · Vendor Advisory
• http://iss.net/security_center/static/8002.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0213 · Security Note
• http://marc.info/?l=bugtraq&m=101223525118717&w=2 · Note
• http://securityfocus.com/bid/3969 · Note