IRIX mediad Vulnerability

Bugtraq ID:	394
Class:	Access Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	Jun 17 1998 12:00AM
Updated:	Jun 17 1998 12:00AM
Credit:	This vulnerability was first reported in an SGI security advisory, dated June 17, 1998.
Vulnerable:	SGI IRIX 6.4 SGI IRIX 6.3 SGI IRIX 6.2 SGI IRIX 6.1 SGI IRIX 6.0.1 XFS SGI IRIX 6.0.1 SGI IRIX 6.0 SGI IRIX 5.3 XFS SGI IRIX 5.2 SGI IRIX 5.1.1 SGI IRIX 5.1
Not Vulnerable:

IRIX mediad Vulnerability

A vulnerability exists in the mediad daemon included with Irix versions 5.x and 6.x from Silicon Graphics. The vulnerability can result in any user who has physical access to the machine being able to obtain root privileges.

IRIX mediad Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

IRIX mediad Vulnerability

Solution:
Patches are avaliable from SGI at http://support.sgi.com

OS Version Patch #
---------- -------
IRIX 5.1.x upgrade
IRIX 5.2 upgrade
IRIX 5.3 3191 & 3189 (Both patches must be installed to
fix this vulnerability).
IRIX 6.0.x upgrade
IRIX 6.1 upgrade
IRIX 6.2 3192 & 3190 (Both patches must be installed to
fix this vulnerability).
IRIX 6.3 3109
IRIX 6.4 2891

IRIX mediad Vulnerability

References:

• SGI Support (Silicon Graphics Inc.)