CVE-2002-0040

Vulnerability in SGI IRIX 6.5.11 through 6.5.15f allows local users to cause privileged applications to dump core via the HOSTALIASES environment variable, which might allow the users to gain privileges.

CVSS v2.0 2.1 LOW

2.1^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
ftp://patches.sgi.com/support/free/security/advisories/20020306-01-P	Patch Vendor Advisory
http://www.iss.net/security_center/static/8669.php
http://www.osvdb.org/2058
http://www.securityfocus.com/bid/4388

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:sgi:irix:6.5:::::::*
	cpe:2.3:o:sgi:irix:6.5.1:::::::*
	cpe:2.3:o:sgi:irix:6.5.2:::::::*
	cpe:2.3:o:sgi:irix:6.5.3:::::::*
	cpe:2.3:o:sgi:irix:6.5.4:::::::*
	cpe:2.3:o:sgi:irix:6.5.5:::::::*
	cpe:2.3:o:sgi:irix:6.5.6:::::::*
	cpe:2.3:o:sgi:irix:6.5.7:::::::*
	cpe:2.3:o:sgi:irix:6.5.8:::::::*
	cpe:2.3:o:sgi:irix:6.5.9:::::::*
	cpe:2.3:o:sgi:irix:6.5.10:::::::*
	cpe:2.3:o:sgi:irix:6.5.11f:::::::*
	cpe:2.3:o:sgi:irix:6.5.11m:::::::*
	cpe:2.3:o:sgi:irix:6.5.12f:::::::*
	cpe:2.3:o:sgi:irix:6.5.12m:::::::*
	cpe:2.3:o:sgi:irix:6.5.13f:::::::*
	cpe:2.3:o:sgi:irix:6.5.13m:::::::*
	cpe:2.3:o:sgi:irix:6.5.14f:::::::*
	cpe:2.3:o:sgi:irix:6.5.14m:::::::*
	cpe:2.3:o:sgi:irix:6.5.15f:::::::*
	cpe:2.3:o:sgi:irix:6.5.15m:::::::*

History

No history.

Information

Published : 2002-03-28 05:00

Updated : 2023-12-10 10:17

NVD link : CVE-2002-0040

Mitre link : CVE-2002-0040

CVE.ORG link : CVE-2002-0040

JSON object : View

Products Affected

sgi

irix

CWE

NVD-CWE-Other

{"id": "CVE-2002-0040", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2002-03-28T05:00:00.000", "references": [{"url": "ftp://patches.sgi.com/support/free/security/advisories/20020306-01-P", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.iss.net/security_center/static/8669.php", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/2058", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/4388", "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Vulnerability in SGI IRIX 6.5.11 through 6.5.15f allows local users to cause privileged applications to dump core via the HOSTALIASES environment variable, which might allow the users to gain privileges."}, {"lang": "es", "value": "Vulnerabilidad en SGI IRIX 6.5.11 a 6.5.15f permite a usuarios locales producir volcados de n\u00facleo (dump core) a aplicaciones con privilegios mediane la variable de entorno HOSTALIASES, que podr\u00eda permitir a los usuarios ganar privilegios."}], "lastModified": "2008-09-05T20:27:01.230", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"}, {"criteria": "cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "36B60E50-4F5A-4404-BEA3-C94F7D27B156"}, {"criteria": "cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"}, {"criteria": "cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"}, {"criteria": "cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "440B7208-34DB-4898-8461-4E703F7EDFB7"}, {"criteria": "cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5663579C-3AD2-4E5B-A595-C8DB984F9C26"}, {"criteria": "cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"}, {"criteria": "cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "29113D8E-9618-4A0E-9157-678332082858"}, {"criteria": "cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "313613E9-4837-433C-90EE-84A92E8D24E5"}, {"criteria": "cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "41AA1290-5039-406F-B195-3A4C018202D3"}, {"criteria": "cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "60CC9410-F6B8-4748-B76F-30626279028E"}, {"criteria": "cpe:2.3:o:sgi:irix:6.5.11f:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7C8E0DF6-D9C2-4DBC-9997-B5BFC6DEC9F9"}, {"criteria": "cpe:2.3:o:sgi:irix:6.5.11m:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D1E1480B-2183-45AD-B63F-16DEC9BF0398"}, {"criteria": "cpe:2.3:o:sgi:irix:6.5.12f:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2D08345C-F945-410C-9DCB-8C358178F975"}, {"criteria": "cpe:2.3:o:sgi:irix:6.5.12m:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8764BE36-9377-486C-9198-DF79A5A60679"}, {"criteria": "cpe:2.3:o:sgi:irix:6.5.13f:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "25243FA1-7AF7-41D4-8FAD-A5AB289E120D"}, {"criteria": "cpe:2.3:o:sgi:irix:6.5.13m:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "94D89730-AA61-4FC9-A6AB-0574CA51EE75"}, {"criteria": "cpe:2.3:o:sgi:irix:6.5.14f:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A7B59E7C-B059-41CD-AE33-E9623ADA12BC"}, {"criteria": "cpe:2.3:o:sgi:irix:6.5.14m:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0DF1B657-C910-4BB0-828C-09B6A59D988D"}, {"criteria": "cpe:2.3:o:sgi:irix:6.5.15f:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "72D61A9F-AC57-4DD9-9047-74BFA9BFACFC"}, {"criteria": "cpe:2.3:o:sgi:irix:6.5.15m:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C254FC5D-895D-4EFC-B9A7-74699D9FE65E"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}