SGI IRIX Checkpoint/Restart libcpr File Corruption Vulnerability

Bugtraq ID:	8433
Class:	Unknown
CVE:	CVE-2003-0679
Remote:	No
Local:	Yes
Published:	Aug 14 2003 12:00AM
Updated:	Jul 11 2009 10:56PM
Credit:	This issue was announced by the vendor.
Vulnerable:	SGI IRIX 6.5.21 m SGI IRIX 6.5.21 f SGI IRIX 6.5.20 m SGI IRIX 6.5.20 f SGI IRIX 6.5.19 m SGI IRIX 6.5.19 f SGI IRIX 6.5.18 m SGI IRIX 6.5.18 f SGI IRIX 6.5.17 m SGI IRIX 6.5.17 f SGI IRIX 6.5.16 SGI IRIX 6.5.15 SGI IRIX 6.5.14 SGI IRIX 6.5.13 SGI IRIX 6.5.12 SGI IRIX 6.5.11 SGI IRIX 6.5.10 SGI IRIX 6.5.9 SGI IRIX 6.5.8 SGI IRIX 6.5.7 SGI IRIX 6.5.6 SGI IRIX 6.5.5 SGI IRIX 6.5.4 SGI IRIX 6.5.3 SGI IRIX 6.5.2 SGI IRIX 6.5.1 SGI IRIX 6.5
Not Vulnerable:	SGI IRIX 6.5.22

SGI IRIX Checkpoint/Restart libcpr File Corruption Vulnerability

SGI has reported a vulnerability in the Checkpoint/Restart libcpr library that could be exploited by a local attacker to corrupt files.

SGI IRIX Checkpoint/Restart libcpr File Corruption Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

SGI IRIX Checkpoint/Restart libcpr File Corruption Vulnerability

Solution:
SGI has addressed this issue in SGI IRIX 6.5.22. Patches 5264-5269 also address this issue in IRIX 6.5.17m and later. Please see the attached advisory for details on obtaining patches. IRIX systems prior to 6.5.17m should be upgraded to a more recent version.

SGI IRIX Checkpoint/Restart libcpr File Corruption Vulnerability

References: