PT-2002-2509 · Sgi · Irix

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-1787

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SGI IRIX versions 6.5 through 6.5.17

Description A buffer overflow issue in the uux component of the eoe.sw.uucp package allows local users to execute arbitrary code. The specific attack vectors used to exploit this issue are not detailed.

Recommendations For SGI IRIX versions 6.5 through 6.5.17, consider restricting access to the uux component until a fix is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2002-1787

Affected Products

Irix

References · 5

• http://securityfocus.com/bid/5892 · Patch
• http://ciac.org/ciac/bulletins/n-004.shtml · Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20020903-02-P · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1787 · Security Note
• http://iss.net/security_center/static/10274.php · Patch