CERTA-2002-AVI-090
Vulnerability from certfr_avis
None
Description
/usr/sbin/cpr est une commande livrée avec le paquetage eoe.sw.cpr (IRIX Checkpoint and Restart) installé par défaut sur les systèmes IRIX 6.5.
3.0.0.1
Une vulnérabilité de type débordement de mémoire présente dans la commande /usr/sbin/cpr peut permettre à un utilisateur mal intentionné d'obtenir les privilèges de l'administrateur root.
Cette vulnérabilité n'est pas exploitable à distance.
Solution
IRIX 6.5.11 corrige cette vulnérabilité.
IRIX 6.5 à 6.5.10.
Les versions antérieures, non maintenues, n'ont pas été testées.
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cp\u003eIRIX 6.5 \u00e0 6.5.10. \u003cP\u003eLes versions ant\u00e9rieures, non maintenues, n\u0027ont pas \u00e9t\u00e9 test\u00e9es.\u003c/P\u003e\u003c/p\u003e",
"content": "## Description\n\n/usr/sbin/cpr est une commande livr\u00e9e avec le paquetage eoe.sw.cpr (IRIX\nCheckpoint and Restart) install\u00e9 par d\u00e9faut sur les syst\u00e8mes IRIX 6.5.\n\n#### 3.0.0.1\n\nUne vuln\u00e9rabilit\u00e9 de type d\u00e9bordement de m\u00e9moire pr\u00e9sente dans la\ncommande /usr/sbin/cpr peut permettre \u00e0 un utilisateur mal intentionn\u00e9\nd\u0027obtenir les privil\u00e8ges de l\u0027administrateur root.\n\nCette vuln\u00e9rabilit\u00e9 n\u0027est pas exploitable \u00e0 distance.\n\n## Solution\n\nIRIX 6.5.11 corrige cette vuln\u00e9rabilit\u00e9.\n",
"cves": [],
"initial_release_date": "2002-05-02T00:00:00",
"last_revision_date": "2002-05-02T00:00:00",
"links": [
{
"title": "Avis de s\u00e9curit\u00e9 20020409-01-I de SGI disponible \u00e0 l\u0027adresse suivante :",
"url": "ftp://patches.sgi.com/support/free/security/advisories/20020409-01-I"
}
],
"reference": "CERTA-2002-AVI-090",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2002-05-02T00:00:00.000000"
}
],
"risks": [
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": null,
"title": "Vuln\u00e9rabilit\u00e9 de la commande cpr sous IRIX",
"vendor_advisories": [
{
"published_at": null,
"title": "Avis 20020409-01-I de SGI",
"url": null
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…