SGI IRIX Undisclosed ARP Handling Vulnerability
BID:11278
Info
SGI IRIX Undisclosed ARP Handling Vulnerability
| Bugtraq ID: | 11278 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 29 2004 12:00AM |
| Updated: | Sep 29 2004 12:00AM |
| Credit: | This vulnerability was announced by the vendor. |
| Vulnerable: |
SGI IRIX 6.5.25 SGI IRIX 6.5.24 SGI IRIX 6.5.23 SGI IRIX 6.5.22 |
| Not Vulnerable: | |
Discussion
SGI IRIX Undisclosed ARP Handling Vulnerability
SGI IRIX is reported prone to an undisclosed ARP handling vulnerability. This issue might be related to the issue that is described in BID 265 (NetBSD Static ARP Vulnerability) although this is not confirmed.
It is conjectured that this vulnerability may be exploited to overwrite static ARP entries that exist in the ARP cache of a vulnerable host.
This BID will be updated, as more information regarding this vulnerability is made public.
SGI IRIX is reported prone to an undisclosed ARP handling vulnerability. This issue might be related to the issue that is described in BID 265 (NetBSD Static ARP Vulnerability) although this is not confirmed.
It is conjectured that this vulnerability may be exploited to overwrite static ARP entries that exist in the ARP cache of a vulnerable host.
This BID will be updated, as more information regarding this vulnerability is made public.
Exploit / POC
SGI IRIX Undisclosed ARP Handling Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
SGI IRIX Undisclosed ARP Handling Vulnerability
Solution:
SGI has released an advisory (20040905-01-P) and updates dealing with this issue for affected IRIX platforms. Customers are advised to see the referenced advisory for further information regarding obtaining and applying appropriate updates.
SGI IRIX 6.5.22
SGI IRIX 6.5.23
SGI IRIX 6.5.24
SGI IRIX 6.5.25
Solution:
SGI has released an advisory (20040905-01-P) and updates dealing with this issue for affected IRIX platforms. Customers are advised to see the referenced advisory for further information regarding obtaining and applying appropriate updates.
SGI IRIX 6.5.22
SGI IRIX 6.5.23
SGI IRIX 6.5.24
SGI IRIX 6.5.25
References
SGI IRIX Undisclosed ARP Handling Vulnerability
References:
References: