BID:4499

SGI IRIX Mail Core Dump Vulnerability

Info

SGI IRIX Mail Core Dump Vulnerability

Bugtraq ID:	4499
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Apr 11 2002 12:00AM
Updated:	Apr 11 2002 12:00AM
Credit:	This vulnerability announced in an SGI Security Advisory.
Vulnerable:	SGI IRIX 6.5.15 m SGI IRIX 6.5.15 f SGI IRIX 6.5.14 m SGI IRIX 6.5.14 f SGI IRIX 6.5.13 m SGI IRIX 6.5.13 f SGI IRIX 6.5.12 m SGI IRIX 6.5.12 f SGI IRIX 6.5.11 m SGI IRIX 6.5.11 f SGI IRIX 6.5.10 SGI IRIX 6.5.9 SGI IRIX 6.5.8 SGI IRIX 6.5.7 SGI IRIX 6.5.6 SGI IRIX 6.5.5 SGI IRIX 6.5.4 SGI IRIX 6.5.3 SGI IRIX 6.5.2 SGI IRIX 6.5.1 SGI IRIX 6.5

Not Vulnerable:

Discussion

SGI IRIX Mail Core Dump Vulnerability

IRIX is the Unix derivative operating system distributed and maintained by SGI.

Under some circumstances, it may be possible for a local user to force the mail program to core dump. This problem is likely due to a buffer overflow. As the mail program is typically a setgid mail executable, this could lead to a local privilege elevation.

Exploit / POC

SGI IRIX Mail Core Dump Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.