BID:8415

SGI IRIX NFSD XDR Decoding Remote Denial of Service Vulnerability

Info

SGI IRIX NFSD XDR Decoding Remote Denial of Service Vulnerability

Bugtraq ID:	8415
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2003-0576
Remote:	Yes
Local:	No
Published:	Aug 13 2003 12:00AM
Updated:	Jul 11 2009 10:56PM
Credit:	This vulnerability was announced by SGI.
Vulnerable:	SGI IRIX 6.5.19 m SGI IRIX 6.5.19 f SGI IRIX 6.5.18 m SGI IRIX 6.5.18 f SGI IRIX 6.5.17 m SGI IRIX 6.5.17 f SGI IRIX 6.5.16 SGI IRIX 6.5.15 SGI IRIX 6.5.14 SGI IRIX 6.5.13 SGI IRIX 6.5.12 SGI IRIX 6.5.11 SGI IRIX 6.5.10 SGI IRIX 6.5.9 SGI IRIX 6.5.8 SGI IRIX 6.5.7 SGI IRIX 6.5.6 SGI IRIX 6.5.5 SGI IRIX 6.5.4 SGI IRIX 6.5.3 SGI IRIX 6.5.2 SGI IRIX 6.5.1 SGI IRIX 6.5

Not Vulnerable:	SGI IRIX 6.5.21 SGI IRIX 6.5.20

Discussion

SGI IRIX NFSD XDR Decoding Remote Denial of Service Vulnerability

A vulnerability discovered in IRIX nsfd, announced by SGI, may make the daemon prone to remote denial of service attacks. The problem is said to occur when specific XDR decoding errors are triggered.

Successful exploitation of this vulnerability would allow a remote attacker to trigger a system panic on an affected host.

Exploit / POC

SGI IRIX NFSD XDR Decoding Remote Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

SGI IRIX NFSD XDR Decoding Remote Denial of Service Vulnerability

Solution:
SGI suggests that users either apply a patch for the appropriate operating system, or if a patch is not available, it is advised that administrators upgrade their systems to IRIX 6.5.20 or 6.5.21.

Patches:

SGI IRIX 6.5.17 f