PT-2004-1159 · Sgi · Sgi Irix+1

Published 2004-03-10 · Updated 2017-07-11 · CVE-2003-0796

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SGI IRIX versions 6.5.18 through 6.5.22

Description The issue allows remote attackers to mount from unprivileged ports, even when the -n option is disabled. This occurs due to an unknown vulnerability in rpc.mountd.

Recommendations For SGI IRIX versions 6.5.18 through 6.5.22, consider restricting access to rpc.mountd to minimize the risk of exploitation until a patch is available.

Fix

Related Identifiers

CVE-2003-0796

Affected Products

Sgi Irix

Rpc.Mountd

References · 5

• http://securityfocus.com/bid/9085 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-0796 · Security Note
• ftp://patches.sgi.com/support/free/security/advisories/20031102-01-P.asc · Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20031102-02-P.asc · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13807 · Note