IRIX Performance Co-Pilot Remote Denial of Service Vulnerability

Bugtraq ID:	4642
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Apr 12 2000 12:00AM
Updated:	Apr 12 2000 12:00AM
Credit:	Discovered by Marcelo Magnasco <[email protected]>.
Vulnerable:	SGI IRIX 6.5.10 SGI IRIX 6.5.9 SGI IRIX 6.5.8 SGI IRIX 6.5.7 SGI IRIX 6.5.6 SGI IRIX 6.5.5 SGI IRIX 6.5.4 SGI IRIX 6.5.3 SGI IRIX 6.5.2 SGI IRIX 6.5.1 SGI IRIX 6.5
Not Vulnerable:	SGI IRIX 6.5.16 SGI IRIX 6.5.15 SGI IRIX 6.5.14 SGI IRIX 6.5.13 SGI IRIX 6.5.12 SGI IRIX 6.5.11

IRIX Performance Co-Pilot Remote Denial of Service Vulnerability

Performance Co-Pilot (PCP) is a set of services to support system-level performance monitoring developed by SGI. It has traditionally been an IRIX product, however SGI has made it open source and it is now available for Linux systems.

A vulnerability exists in some versions of the PCP daemon. It is possible to cause a denial of service condition by sending the daemon a large string of arbitrary data.

This issue was previously included in BID 1106.

IRIX Performance Co-Pilot Remote Denial of Service Vulnerability

References:

• BID 1106: IRIX Performance Copilot Vulnerabilities (SecurityFocus)