PT-2002-1421 · Sgi · Irix

Published 2002-05-29 · Updated 2008-09-11 · CVE-2002-0356

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SGI IRIX versions 6.5.10 and earlier

Description A issue in the XFS filesystem reorganizer allows local users to gain root privileges by overwriting critical system files.

Recommendations For SGI IRIX versions 6.5.10 and earlier, consider restricting access to the fsr xfs reorganizer until a fix is available. As a temporary workaround, limit the ability of local users to overwrite critical system files to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2002-0356

Affected Products

Irix

References · 4

• ftp://patches.sgi.com/support/free/security/advisories/20020504-01-I · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0356 · Security Note
• http://iss.net/security_center/static/9042.php · Note
• http://securityfocus.com/bid/4706 · Note