PT-2005-1525 · Sgi · Sgi Irix

Published 2005-04-08 · Updated 2008-09-05 · CVE-2005-0465

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SGI IRIX (affected versions not specified)

Description The issue concerns the gr osview component in SGI IRIX, which fails to drop privileges before opening files. This allows local users to overwrite arbitrary files using the -s option.

Recommendations For SGI IRIX, consider restricting access to the gr osview component until a fix is available. As a temporary workaround, avoid using the -s option with gr osview to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2005-0465

Affected Products

Sgi Irix

References · 6

• 🔥 https://exploit-db.com/exploits/25362 · Exploit
• 🔥 http://idefense.com/application/poi/display?id=225&type=vulnerabilities · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-0465 · Security Note
• ftp://patches.sgi.com/support/free/security/advisories/20050402-01-P · Patch, Vendor Advisory
• http://secunia.com/advisories/14875 · Note
• http://securitytracker.com/id?1013662 · Note