SGI IRIX 'syssgi()' Local Information Disclosure and Denial of Service Vulnerability

Bugtraq ID:	45729
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	No
Local:	Yes
Published:	Jan 10 2011 12:00AM
Updated:	Jan 10 2011 12:00AM
Credit:	Neil Kettle, Digit Security Ltd
Vulnerable:	SGI IRIX 6.5.29 SGI IRIX 6.5.28 SGI IRIX 6.5.27 SGI IRIX 6.5.26 SGI IRIX 6.5.25 SGI IRIX 6.5.24 m SGI IRIX 6.5.24 SGI IRIX 6.5.23 m SGI IRIX 6.5.23 SGI IRIX 6.5.22 m SGI IRIX 6.5.22 SGI IRIX 6.5.21 m SGI IRIX 6.5.21 f SGI IRIX 6.5.21 SGI IRIX 6.5.20 m SGI IRIX 6.5.20 f SGI IRIX 6.5.20 SGI IRIX 6.5.19 m SGI IRIX 6.5.19 f SGI IRIX 6.5.19 SGI IRIX 6.5.18 m SGI IRIX 6.5.18 f SGI IRIX 6.5.18 SGI IRIX 6.5.17 m SGI IRIX 6.5.17 f SGI IRIX 6.5.17 SGI IRIX 6.5.16 m SGI IRIX 6.5.16 f SGI IRIX 6.5.16 SGI IRIX 6.5.15 m SGI IRIX 6.5.15 f SGI IRIX 6.5.15 SGI IRIX 6.5.14 m SGI IRIX 6.5.14 f SGI IRIX 6.5.14 SGI IRIX 6.5.13 m SGI IRIX 6.5.13 f SGI IRIX 6.5.13 SGI IRIX 6.5.12 m SGI IRIX 6.5.12 f SGI IRIX 6.5.12 SGI IRIX 6.5.11 m SGI IRIX 6.5.11 f SGI IRIX 6.5.11 SGI IRIX 6.5.10 m SGI IRIX 6.5.10 f SGI IRIX 6.5.10 SGI IRIX 6.5.9 m SGI IRIX 6.5.9 f SGI IRIX 6.5.9 SGI IRIX 6.5.8 m SGI IRIX 6.5.8 f SGI IRIX 6.5.8 SGI IRIX 6.5.7 m SGI IRIX 6.5.7 f SGI IRIX 6.5.7 SGI IRIX 6.5.6 m SGI IRIX 6.5.6 f SGI IRIX 6.5.6 SGI IRIX 6.5.5 m SGI IRIX 6.5.5 f SGI IRIX 6.5.5 SGI IRIX 6.5.4 m SGI IRIX 6.5.4 f SGI IRIX 6.5.4 SGI IRIX 6.5.3 m SGI IRIX 6.5.3 f SGI IRIX 6.5.3 SGI IRIX 6.5.2 m SGI IRIX 6.5.2 f SGI IRIX 6.5.2 SGI IRIX 6.5.1 SGI IRIX 6.5 20 SGI IRIX 6.5 .19m SGI IRIX 6.5 .19f SGI IRIX 6.5
Not Vulnerable:

SGI IRIX 'syssgi()' Local Information Disclosure and Denial of Service Vulnerability

The SGI IRIX kernel is prone to a local information-disclosure and denial-of-service vulnerability.

Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks or cause denial-of-service conditions.

SGI IRIX 6.5.X versions are vulnerable.

SGI IRIX 'syssgi()' Local Information Disclosure and Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

SGI IRIX 'syssgi()' Local Information Disclosure and Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.

SGI IRIX 'syssgi()' Local Information Disclosure and Denial of Service Vulnerability

References:

• Digit Security Ltd Research (Digit)
  
• SGI Support (SGI)
  
• Vendor Homepage (SGI)