PT-2004-2897 · Sgi · Sgi Irix

Published 2004-05-05 · Updated 2008-09-05 · CVE-2004-2001

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SGI IRIX versions 6.5 through 6.5.22m

Description The issue concerns the ifconfig command with the -arp option in SGI IRIX, which fails to properly disable ARP requests from being sent or received.

Recommendations For SGI IRIX versions 6.5 through 6.5.22m, consider disabling the use of the ifconfig command with the -arp option until a proper fix is available. As a temporary workaround, restrict the use of ARP requests to minimize potential risks.

Fix

Related Identifiers

CVE-2004-2001

Affected Products

Sgi Irix

References · 3

• http://securityfocus.com/bid/10289 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-2001 · Security Note
• ftp://patches.sgi.com/support/free/security/advisories/20040502-01-P.asc · Vendor Advisory