IRIX diskalign/diskperf Vulnerabilities
BID:348
Info
IRIX diskalign/diskperf Vulnerabilities
| Bugtraq ID: | 348 |
| Class: | Unknown |
| CVE: |
CVE-1999-1492 |
| Remote: | No |
| Local: | Yes |
| Published: | May 27 1998 12:00AM |
| Updated: | Jul 11 2009 12:16AM |
| Credit: | This patch was first made public in an SGI security advisory on May 27, 1998. |
| Vulnerable: |
SGI IRIX 6.4 |
| Not Vulnerable: |
SGI IRIX 6.5 SGI IRIX 6.3 SGI IRIX 6.2 SGI IRIX 5.3 SGI IRIX 5.2 |
Discussion
IRIX diskalign/diskperf Vulnerabilities
A vulnerability exists in the diskperf and diskalign utilies as shipped with Irix 6.4 from Silicon Graphics. The vulnerability will allow for the creation of any file on the filesystem, with root ownership.
A vulnerability exists in the diskperf and diskalign utilies as shipped with Irix 6.4 from Silicon Graphics. The vulnerability will allow for the creation of any file on the filesystem, with root ownership.
Exploit / POC
IRIX diskalign/diskperf Vulnerabilities
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution / Fix
IRIX diskalign/diskperf Vulnerabilities
Solution:
Patches are available from SGI at http://support.sgi.com. The relevant patch is patch number 3030. A suitable short term solution is to remove the setuid bit from botht eh diskperf and diskalign programs.
Solution:
Patches are available from SGI at http://support.sgi.com. The relevant patch is patch number 3030. A suitable short term solution is to remove the setuid bit from botht eh diskperf and diskalign programs.