SGI IRIX fsr_xfs File Overwrite Vulnerability

Bugtraq ID:	4706
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	May 08 2002 12:00AM
Updated:	May 08 2002 12:00AM
Credit:	Credited to John Vanderpool.
Vulnerable:	SGI IRIX 6.5.10 m SGI IRIX 6.5.10 f SGI IRIX 6.5.10 SGI IRIX 6.5.9 m SGI IRIX 6.5.9 f SGI IRIX 6.5.9 SGI IRIX 6.5.8 m SGI IRIX 6.5.8 f SGI IRIX 6.5.8 SGI IRIX 6.5.7 m SGI IRIX 6.5.7 f SGI IRIX 6.5.7 SGI IRIX 6.5.6 m SGI IRIX 6.5.6 f SGI IRIX 6.5.6 SGI IRIX 6.5.5 m SGI IRIX 6.5.5 f SGI IRIX 6.5.5 SGI IRIX 6.5.4 m SGI IRIX 6.5.4 f SGI IRIX 6.5.4 SGI IRIX 6.5.3 m SGI IRIX 6.5.3 f SGI IRIX 6.5.3 SGI IRIX 6.5.2 m SGI IRIX 6.5.2 f SGI IRIX 6.5.2 SGI IRIX 6.5.1 SGI IRIX 6.5
Not Vulnerable:	SGI IRIX 6.5.16 SGI IRIX 6.5.15 m SGI IRIX 6.5.15 f SGI IRIX 6.5.15 SGI IRIX 6.5.14 m SGI IRIX 6.5.14 f SGI IRIX 6.5.14 SGI IRIX 6.5.13 m SGI IRIX 6.5.13 f SGI IRIX 6.5.13 SGI IRIX 6.5.12 m SGI IRIX 6.5.12 f SGI IRIX 6.5.12 SGI IRIX 6.5.11 m SGI IRIX 6.5.11 f SGI IRIX 6.5.11

SGI IRIX fsr_xfs File Overwrite Vulnerability

SGI IRIX includes fsr_xfs, an XFS filesystem reorganizer. fsr_xfs is executed in a root owned cron task under default system configurations.

A vulnerabilty has been reported in some versions of IRIX. A local attacker may cause fsr_xfs to overwrite sensitive system files. Reportedly, it is possible for a local user to gain root access.

Further technical details are not available at this time.

SGI IRIX fsr_xfs File Overwrite Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

SGI IRIX fsr_xfs File Overwrite Vulnerability

Solution:
Recent versions of IRIX are not vulnerable.

SGI IRIX fsr_xfs File Overwrite Vulnerability

References: