PT-2004-2789 · Sgi · Irix

Published 2004-12-31 · Updated 2008-09-05 · CVE-2004-1891

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SGI IRIX version 6.5.20

Description The ftp syslog function in ftpd has an issue related to anonymous FTP, which may prevent the actions of anonymous users from being logged. The exact impact of this issue is unknown.

Recommendations For SGI IRIX version 6.5.20, consider modifying the ftp syslog function to properly handle anonymous FTP connections until a patch is available. As a temporary workaround, restrict access to anonymous FTP to minimize the risk of unlogged actions. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2004-1891

Affected Products

Irix

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2004-1891 · Security Note
• ftp://patches.sgi.com/support/free/security/advisories/20040401-01-P.asc · Vendor Advisory