PT-2003-1250 · Sgi · Irix

Published 2003-04-02 · Updated 2008-09-05 · CVE-2002-1517

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IRIX version 6.5

Description The issue allows local users to conduct unauthorized file activities via a symlink attack, possibly by exploiting the .fsrlast file.

Recommendations For IRIX version 6.5, consider restricting access to the fsr efs functionality to minimize the risk of exploitation. As a temporary workaround, avoid using the .fsrlast file until a patch is available.

Fix

Related Identifiers

CVE-2002-1517

Affected Products

Irix

References · 9

• ftp://patches.sgi.com/support/free/security/advisories/20020903-02-P · Vendor Advisory
• http://securityfocus.com/bid/5897 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1517 · Security Note
• http://ciac.org/ciac/bulletins/n-004.shtml · Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20021103-02-P · Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20020903-01-P · Vendor Advisory
• http://iss.net/security_center/static/10275.php · Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20021103-01-P · Vendor Advisory
• http://osvdb.org/8579 · Note