SGI IRIX RPC.MountD Read-Mostly Mount Unspecified File Access Vulnerability

Bugtraq ID:	13889
Class:	Access Validation Error
CVE:	CVE-2005-0139 CVE-2005-0138
Remote:	Yes
Local:	No
Published:	Jun 08 2005 12:00AM
Updated:	Jul 12 2009 02:56PM
Credit:	The vendor disclosed this vulnerability.
Vulnerable:	SGI IRIX 6.5.27 SGI IRIX 6.5.26 SGI IRIX 6.5.25
Not Vulnerable:

SGI IRIX RPC.MountD Read-Mostly Mount Unspecified File Access Vulnerability

SGI IRIX is susceptible to an unspecified file access vulnerability. This issue is due to a failure of the NFS server to properly enforce privileges on client computers.

This issue allows client computers to gain access beyond that which the administrator has allowed. In certain unspecified circumstances, NFS clients may gain inappropriate read-write access to files contained in read-mostly network shares.

SGI IRIX versions 6.5.25 through 6.5.27 are vulnerable. Previous versions may also be affected.

SGI IRIX RPC.MountD Read-Mostly Mount Unspecified File Access Vulnerability

An exploit is not required.

SGI IRIX RPC.MountD Read-Mostly Mount Unspecified File Access Vulnerability

Solution:
The vendor has released security advisory 20050601-01-P, along with fixes to address this issue. Please see the referenced advisory for further information.


SGI IRIX 6.5.25

• SGI 5898
  ftp://patches.sgi.com/support/free/security/patches/6.5.25/patch5898.t ar

SGI IRIX 6.5.26

• SGI 5899
  ftp://patches.sgi.com/support/free/security/patches/6.5.26/patch5899.t ar

SGI IRIX 6.5.27

• SGI 5899
  ftp://patches.sgi.com/support/free/security/patches/6.5.27/patch5899.t ar

SGI IRIX RPC.MountD Read-Mostly Mount Unspecified File Access Vulnerability

References:

• IRIX Product Page (SGI)