IRIX Checkpoint and Restart libcpr Library Loading Privilege Escalation Vulnerability
BID:10418
Info
IRIX Checkpoint and Restart libcpr Library Loading Privilege Escalation Vulnerability
| Bugtraq ID: | 10418 |
| Class: | Unknown |
| CVE: |
CVE-2004-0134 |
| Remote: | No |
| Local: | Yes |
| Published: | May 26 2004 12:00AM |
| Updated: | Jul 12 2009 05:16AM |
| Credit: | Discovery of this issue is credited to Adam Gowdiak from the Poznan Supercomputing and Networking Center. |
| Vulnerable: |
SGI IRIX 6.5.24 SGI IRIX 6.5.23 SGI IRIX 6.5.22 m SGI IRIX 6.5.22 SGI IRIX 6.5.21 m SGI IRIX 6.5.21 f SGI IRIX 6.5.21 SGI IRIX 6.5.20 m SGI IRIX 6.5.20 f SGI IRIX 6.5.20 SGI IRIX 6.5.19 m SGI IRIX 6.5.19 f SGI IRIX 6.5.19 SGI IRIX 6.5.18 m SGI IRIX 6.5.18 f SGI IRIX 6.5.18 SGI IRIX 6.5.17 m SGI IRIX 6.5.17 f SGI IRIX 6.5.17 SGI IRIX 6.5.16 m SGI IRIX 6.5.16 f SGI IRIX 6.5.16 SGI IRIX 6.5.15 m SGI IRIX 6.5.15 f SGI IRIX 6.5.15 SGI IRIX 6.5.14 m SGI IRIX 6.5.14 f SGI IRIX 6.5.14 SGI IRIX 6.5.13 m SGI IRIX 6.5.13 f SGI IRIX 6.5.13 SGI IRIX 6.5.12 m SGI IRIX 6.5.12 f SGI IRIX 6.5.12 SGI IRIX 6.5.11 m SGI IRIX 6.5.11 f SGI IRIX 6.5.11 SGI IRIX 6.5.10 m SGI IRIX 6.5.10 f SGI IRIX 6.5.10 SGI IRIX 6.5.9 m SGI IRIX 6.5.9 f SGI IRIX 6.5.9 SGI IRIX 6.5.8 m SGI IRIX 6.5.8 f SGI IRIX 6.5.8 SGI IRIX 6.5.7 m SGI IRIX 6.5.7 f SGI IRIX 6.5.7 SGI IRIX 6.5.6 m SGI IRIX 6.5.6 f SGI IRIX 6.5.6 SGI IRIX 6.5.5 m SGI IRIX 6.5.5 f SGI IRIX 6.5.5 SGI IRIX 6.5.4 m SGI IRIX 6.5.4 f SGI IRIX 6.5.4 SGI IRIX 6.5.3 m SGI IRIX 6.5.3 f SGI IRIX 6.5.3 SGI IRIX 6.5.2 m SGI IRIX 6.5.2 f SGI IRIX 6.5.2 SGI IRIX 6.5.1 SGI IRIX 6.5 20 SGI IRIX 6.5 .19m SGI IRIX 6.5 .19f SGI IRIX 6.5 SGI IRIX 6.4 SGI IRIX 6.3 SGI IRIX 6.2 SGI IRIX 6.1 SGI IRIX 6.0.1 XFS SGI IRIX 6.0.1 SGI IRIX 6.0 SGI IRIX 5.3 XFS SGI IRIX 5.3 SGI IRIX 5.2 SGI IRIX 5.1.1 SGI IRIX 5.1 SGI IRIX 5.0.1 SGI IRIX 5.0 SGI IRIX 4.0.5 IPR SGI IRIX 4.0.5 H SGI IRIX 4.0.5 G SGI IRIX 4.0.5 F SGI IRIX 4.0.5 E SGI IRIX 4.0.5 D SGI IRIX 4.0.5 A SGI IRIX 4.0.5 (IOP) SGI IRIX 4.0.5 SGI IRIX 4.0.4 T SGI IRIX 4.0.4 B SGI IRIX 4.0.4 SGI IRIX 4.0.3 SGI IRIX 4.0.2 SGI IRIX 4.0.1 T SGI IRIX 4.0.1 SGI IRIX 4.0 SGI IRIX 3.3.3 SGI IRIX 3.3.2 SGI IRIX 3.3.1 SGI IRIX 3.3 SGI IRIX 3.2 GNU Mailman 2.1.10 b1 GNU Mailman 2.1.4 GNU Mailman 2.1.3 GNU Mailman 2.1.1 GNU Mailman 2.1 GNU Mailman 2.0.13 GNU Mailman 2.0.12 GNU Mailman 2.0.11 GNU Mailman 2.0.10 GNU Mailman 2.0.9 GNU Mailman 2.0.8 GNU Mailman 2.0.7 GNU Mailman 2.0.6 GNU Mailman 2.0.5 GNU Mailman 2.0.4 GNU Mailman 2.0.4 GNU Mailman 2.0.3 GNU Mailman 2.0.2 GNU Mailman 2.0.1 GNU Mailman 2.0 beta5 GNU Mailman 2.0 beta4 GNU Mailman 2.0 beta3 GNU Mailman 2.0 .8 GNU Mailman 2.0 .7 GNU Mailman 2.0 .6 GNU Mailman 2.0 .5 GNU Mailman 2.0 .3 GNU Mailman 2.0 .2 GNU Mailman 2.0 .1 GNU Mailman 2.0 |
| Not Vulnerable: |
SGI IRIX 6.5.25 GNU Mailman 2.1.5 |
Discussion
IRIX Checkpoint and Restart libcpr Library Loading Privilege Escalation Vulnerability
IRIX Checkpoint and Restart libcpr is vulnerable to a library loading privilege escalation vulnerability.
This will allow an attacker to gain superuser privileges on an affected computer when successfully exploited.
IRIX Checkpoint and Restart libcpr is vulnerable to a library loading privilege escalation vulnerability.
This will allow an attacker to gain superuser privileges on an affected computer when successfully exploited.
Exploit / POC
IRIX Checkpoint and Restart libcpr Library Loading Privilege Escalation Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
IRIX Checkpoint and Restart libcpr Library Loading Privilege Escalation Vulnerability
Solution:
The vendor has released an upgrade, as well as patches, dealing with this issue. Please see the referenced advisory for more information.
GNU Mailman 2.0 beta3
GNU Mailman 2.0
GNU Mailman 2.0 .1
GNU Mailman 2.0 .7
GNU Mailman 2.0 .5
GNU Mailman 2.0 .2
GNU Mailman 2.0 .8
GNU Mailman 2.0 beta4
GNU Mailman 2.0.1
GNU Mailman 2.0.10
GNU Mailman 2.0.11
GNU Mailman 2.0.13
GNU Mailman 2.0.2
GNU Mailman 2.0.3
GNU Mailman 2.0.4
GNU Mailman 2.0.5
GNU Mailman 2.0.6
GNU Mailman 2.0.7
GNU Mailman 2.0.8
GNU Mailman 2.0.9
GNU Mailman 2.1
GNU Mailman 2.1.1
GNU Mailman 2.1.10 b1
Solution:
The vendor has released an upgrade, as well as patches, dealing with this issue. Please see the referenced advisory for more information.
GNU Mailman 2.0 beta3
-
GNU mailman-2.1.5.tgz
http://prdownloads.sourceforge.net/mailman/mailman-2.1.5.tgz?download
GNU Mailman 2.0
-
GNU mailman-2.1.5.tgz
http://prdownloads.sourceforge.net/mailman/mailman-2.1.5.tgz?download
GNU Mailman 2.0 .1
-
GNU mailman-2.1.5.tgz
http://prdownloads.sourceforge.net/mailman/mailman-2.1.5.tgz?download
GNU Mailman 2.0 .7
-
GNU mailman-2.1.5.tgz
http://prdownloads.sourceforge.net/mailman/mailman-2.1.5.tgz?download
GNU Mailman 2.0 .5
-
GNU mailman-2.1.5.tgz
http://prdownloads.sourceforge.net/mailman/mailman-2.1.5.tgz?download
GNU Mailman 2.0 .2
-
GNU mailman-2.1.5.tgz
http://prdownloads.sourceforge.net/mailman/mailman-2.1.5.tgz?download
GNU Mailman 2.0 .8
-
GNU mailman-2.1.5.tgz
http://prdownloads.sourceforge.net/mailman/mailman-2.1.5.tgz?download
GNU Mailman 2.0 beta4
-
GNU mailman-2.1.5.tgz
http://prdownloads.sourceforge.net/mailman/mailman-2.1.5.tgz?download
GNU Mailman 2.0.1
-
GNU mailman-2.1.5.tgz
http://prdownloads.sourceforge.net/mailman/mailman-2.1.5.tgz?download
GNU Mailman 2.0.10
-
GNU mailman-2.1.5.tgz
http://prdownloads.sourceforge.net/mailman/mailman-2.1.5.tgz?download
GNU Mailman 2.0.11
-
GNU mailman-2.1.5.tgz
http://prdownloads.sourceforge.net/mailman/mailman-2.1.5.tgz?download
GNU Mailman 2.0.13
-
GNU mailman-2.1.5.tgz
http://prdownloads.sourceforge.net/mailman/mailman-2.1.5.tgz?download
GNU Mailman 2.0.2
-
GNU mailman-2.1.5.tgz
http://prdownloads.sourceforge.net/mailman/mailman-2.1.5.tgz?download
GNU Mailman 2.0.3
-
GNU mailman-2.1.5.tgz
http://prdownloads.sourceforge.net/mailman/mailman-2.1.5.tgz?download
GNU Mailman 2.0.4
-
GNU mailman-2.1.5.tgz
http://prdownloads.sourceforge.net/mailman/mailman-2.1.5.tgz?download
GNU Mailman 2.0.5
-
GNU mailman-2.1.5.tgz
http://prdownloads.sourceforge.net/mailman/mailman-2.1.5.tgz?download
GNU Mailman 2.0.6
-
GNU mailman-2.1.5.tgz
http://prdownloads.sourceforge.net/mailman/mailman-2.1.5.tgz?download
GNU Mailman 2.0.7
-
GNU mailman-2.1.5.tgz
http://prdownloads.sourceforge.net/mailman/mailman-2.1.5.tgz?download
GNU Mailman 2.0.8
-
GNU mailman-2.1.5.tgz
http://prdownloads.sourceforge.net/mailman/mailman-2.1.5.tgz?download
GNU Mailman 2.0.9
-
GNU mailman-2.1.5.tgz
http://prdownloads.sourceforge.net/mailman/mailman-2.1.5.tgz?download
GNU Mailman 2.1
-
GNU mailman-2.1.5.tgz
http://prdownloads.sourceforge.net/mailman/mailman-2.1.5.tgz?download
GNU Mailman 2.1.1
-
GNU mailman-2.1.5.tgz
http://prdownloads.sourceforge.net/mailman/mailman-2.1.5.tgz?download
GNU Mailman 2.1.10 b1
-
GNU mailman-2.1.5.tgz
http://prdownloads.sourceforge.net/mailman/mailman-2.1.5.tgz?download
References
IRIX Checkpoint and Restart libcpr Library Loading Privilege Escalation Vulnerability
References:
References: