BID:9085

SGI rpc.mountd Unauthorized Drive Mounting Vulnerability

Info

SGI rpc.mountd Unauthorized Drive Mounting Vulnerability

Bugtraq ID:	9085
Class:	Access Validation Error
CVE:	CVE-2003-0796
Remote:	Yes
Local:	No
Published:	Nov 21 2003 12:00AM
Updated:	Jul 12 2009 12:56AM
Credit:	This issue was announced in an SGI advisory.
Vulnerable:	SGI IRIX 6.5.22 SGI IRIX 6.5.21 m SGI IRIX 6.5.21 f SGI IRIX 6.5.20 m SGI IRIX 6.5.20 f SGI IRIX 6.5.19 m SGI IRIX 6.5.19 f SGI IRIX 6.5.18 m SGI IRIX 6.5.18 f SGI IRIX 6.5.17 m SGI IRIX 6.5.17 f SGI IRIX 6.5.16 SGI IRIX 6.5.15 SGI IRIX 6.5.14 SGI IRIX 6.5.13 SGI IRIX 6.5.12 SGI IRIX 6.5.11 SGI IRIX 6.5.10 SGI IRIX 6.5.9 SGI IRIX 6.5.8 SGI IRIX 6.5.7 SGI IRIX 6.5.6 SGI IRIX 6.5.5 SGI IRIX 6.5.4 SGI IRIX 6.5.3 SGI IRIX 6.5.2 SGI IRIX 6.5.1 SGI IRIX 6.5

Not Vulnerable:

Discussion

SGI rpc.mountd Unauthorized Drive Mounting Vulnerability

SGI has announced the existence of a vulnerability in rpc.mountd that could lead to the unauthorized mounting of drives. The precise details regarding this issue are currently unknown, however this BID will be updated as further information is made available.

Exploit / POC

SGI rpc.mountd Unauthorized Drive Mounting Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

SGI rpc.mountd Unauthorized Drive Mounting Vulnerability

Solution:
SGI has released an updated security advisory (20031102-02-P) including patches to address this issue. This advisory includes updated patches 5426-5429 to address a mismatch between exportfs and rpc.mountd that was introduced in the previous patches. Please see the revised advisory for further information.

SGI IRIX 6.5.18 m