PT-2002-2508 · Sgi · Sgi Irix

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-1786

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions SGI IRIX versions 6.5 through 6.5.14

Description The issue allows local users to read core dumps and possibly obtain sensitive information because SGI IRIX applies a umask of 022 to root core dumps.

Recommendations For SGI IRIX versions 6.5 through 6.5.14, consider changing the umask applied to root core dumps to a more restrictive setting to prevent unauthorized access.

Fix

Related Identifiers

CVE-2002-1786

Affected Products

Sgi Irix

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-1786 · Security Note
• http://iss.net/security_center/static/10138.php · Patch
• http://securityfocus.com/bid/5737 · Patch
• ftp://patches.sgi.com/support/free/security/advisories/20020902-01-I · Vendor Advisory