SGI Irix Bulk Data Services Arbitrary File Disclosure Vulnerability
BID:5448
Info
SGI Irix Bulk Data Services Arbitrary File Disclosure Vulnerability
| Bugtraq ID: | 5448 |
| Class: | Access Validation Error |
| CVE: |
CVE-2002-0632 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 12 2002 12:00AM |
| Updated: | Jul 11 2009 03:56PM |
| Credit: | Credit is given to Sandia Labs. |
| Vulnerable: |
SGI IRIX 6.5.16 SGI IRIX 6.5.15 SGI IRIX 6.5.14 SGI IRIX 6.5.13 SGI IRIX 6.5.12 SGI IRIX 6.5.11 SGI IRIX 6.5.10 SGI IRIX 6.5.9 SGI IRIX 6.5.8 SGI IRIX 6.5.7 SGI IRIX 6.5.6 SGI IRIX 6.5.5 SGI IRIX 6.5.4 SGI IRIX 6.5.3 SGI IRIX 6.5.2 SGI IRIX 6.5.1 SGI IRIX 6.5 |
| Not Vulnerable: | |
Discussion
SGI Irix Bulk Data Services Arbitrary File Disclosure Vulnerability
SGI Bulk Data Service (BDS) is a NFS extension available for the Irix operating system.
A vulnerability has been reported in some versions of the Bulk Data Service. It may be possible for a client application to gain read access to arbitrary files on the vulnerable system.
SGI Bulk Data Service (BDS) is a NFS extension available for the Irix operating system.
A vulnerability has been reported in some versions of the Bulk Data Service. It may be possible for a client application to gain read access to arbitrary files on the vulnerable system.
Exploit / POC
SGI Irix Bulk Data Services Arbitrary File Disclosure Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
SGI Irix Bulk Data Services Arbitrary File Disclosure Vulnerability
Solution:
SGI has reported that this issue will be resolved in BSDPro 2.5 in the near future.
Patches are available:
SGI IRIX 6.5.13
SGI IRIX 6.5.14
SGI IRIX 6.5.15
SGI IRIX 6.5.16
Solution:
SGI has reported that this issue will be resolved in BSDPro 2.5 in the near future.
Patches are available:
SGI IRIX 6.5.13
-
SGI patch4713
ftp://patches.sgi.com/support/free/security/patches/
SGI IRIX 6.5.14
-
SGI patch4713
ftp://patches.sgi.com/support/free/security/patches/
SGI IRIX 6.5.15
-
SGI patch4713
ftp://patches.sgi.com/support/free/security/patches/
SGI IRIX 6.5.16
-
SGI patch4713
ftp://patches.sgi.com/support/free/security/patches/
References
SGI Irix Bulk Data Services Arbitrary File Disclosure Vulnerability
References:
References: