PT-2020-7735 · Sgi · Sgi Tempo

Published 2020-01-27 · Updated 2020-02-04 · CVE-2014-7302

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SGI Tempo (affected versions not specified)

Description The issue allows local users to change the permissions of arbitrary files by executing /opt/sgi/sgimc/bin/vx. This is due to weak permissions for certain files.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2014-7302

Affected Products

Sgi Tempo

References · 4

• 🔥 http://packetstormsecurity.com/files/129465/SGI-Tempo-vx-Setuid-Privilege-Escalation.html · Exploit
• 🔥 https://labs.mwrinfosecurity.com/advisories/2014/12/02/sgi-suid-root-privilege-escalation · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-7302 · Security Note
• https://t.me/cvenotify/469 · Telegram Post