IRIX colorview Vulnerability
BID:336
Info
IRIX colorview Vulnerability
| Bugtraq ID: | 336 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Feb 09 1995 12:00AM |
| Updated: | Feb 09 1995 12:00AM |
| Credit: | The vulnerability was announced on BUGTRAQ by Dave Sill <[email protected]>. |
| Vulnerable: |
SGI IRIX 6.0.1 SGI IRIX 6.0 SGI IRIX 5.2 SGI IRIX 5.1.1 SGI IRIX 5.1 |
| Not Vulnerable: |
SGI IRIX 5.3 XFS SGI IRIX 5.3 |
Discussion
IRIX colorview Vulnerability
Colorview fails to validate that the user has access to the file supplied to the -text option. As a result, users can view arbitrary files.
Colorview fails to validate that the user has access to the file supplied to the -text option. As a result, users can view arbitrary files.