CVEvulnerability
CVE-2002-0359
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-07-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
xfsmd for IRIX 6.5 through 6.5.16 uses weak authentication, which allows remote attackers to call dangerous RPC functions, including those that can mount or unmount xfs file systems, to gain root privileges.
Affected configurations
• sgi irix 6.2
• sgi irix 6.3
• sgi irix 6.4
• sgi irix 6.5
• sgi irix 6.5.1
• sgi irix 6.5.2
• sgi irix 6.5.2f
• sgi irix 6.5.2m
• sgi irix 6.5.3
• sgi irix 6.5.3f
• sgi irix 6.5.3m
• sgi irix 6.5.4
• sgi irix 6.5.4f
• sgi irix 6.5.4m
• sgi irix 6.5.5
• sgi irix 6.5.5f
• sgi irix 6.5.5m
• sgi irix 6.5.6
• sgi irix 6.5.6f
• sgi irix 6.5.6m
• sgi irix 6.5.7
• sgi irix 6.5.7f
• sgi irix 6.5.7m
• sgi irix 6.5.8
• sgi irix 6.5.8f
• sgi irix 6.5.8m
• sgi irix 6.5.9
• sgi irix 6.5.9f
• sgi irix 6.5.9m
• sgi irix 6.5.10
• sgi irix 6.5.10f
• sgi irix 6.5.10m
• sgi irix 6.5.11
• sgi irix 6.5.11f
• sgi irix 6.5.11m
• sgi irix 6.5.12
• sgi irix 6.5.12f
• sgi irix 6.5.12m
• sgi irix 6.5.13
• sgi irix 6.5.13f
• sgi irix 6.5.13m
• sgi irix 6.5.14
• sgi irix 6.5.14f
• sgi irix 6.5.14m
• sgi irix 6.5.15
• sgi irix 6.5.15f
• sgi irix 6.5.15m
• sgi irix 6.5.16
References
- ftp://patches.sgi.com/support/free/security/advisories/20020606-01-I Patch, Vendor Advisory
- http://marc.info/?l=bugtraq&m=102459162909825&w=2 marc.info
- http://www.iss.net/security_center/static/9401.php www.iss.net
- http://www.kb.cert.org/vuls/id/521147 US Government Resource
- http://www.securityfocus.com/bid/5072 www.securityfocus.com
- ftp://patches.sgi.com/support/free/security/advisories/20020606-01-I Patch, Vendor Advisory
- http://marc.info/?l=bugtraq&m=102459162909825&w=2 marc.info
- http://www.iss.net/security_center/static/9401.php www.iss.net
- http://www.kb.cert.org/vuls/id/521147 US Government Resource
- http://www.securityfocus.com/bid/5072 www.securityfocus.com