CVEvulnerability
CVE-2003-0173
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2003-05-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
xfsdq in xfsdump does not create quota information files securely, which allows local users to gain root privileges.
Affected configurations
• xfsdump xfsdump 2.0.0
• xfsdump xfsdump 2.0.1
• xfsdump xfsdump 2.0.2
• xfsdump xfsdump 2.0.3
• xfsdump xfsdump 2.0.4
• xfsdump xfsdump 2.0.5
• sgi irix 6.5
• sgi irix 6.5.1
• sgi irix 6.5.2
• sgi irix 6.5.2f
• sgi irix 6.5.2m
• sgi irix 6.5.3
• sgi irix 6.5.3f
• sgi irix 6.5.3m
• sgi irix 6.5.4
• sgi irix 6.5.4f
• sgi irix 6.5.4m
• sgi irix 6.5.5
• sgi irix 6.5.5f
• sgi irix 6.5.5m
• sgi irix 6.5.6
• sgi irix 6.5.6f
• sgi irix 6.5.6m
• sgi irix 6.5.7
• sgi irix 6.5.7f
• sgi irix 6.5.7m
• sgi irix 6.5.8
• sgi irix 6.5.8f
• sgi irix 6.5.8m
• sgi irix 6.5.9
• sgi irix 6.5.9f
• sgi irix 6.5.9m
• sgi irix 6.5.10
• sgi irix 6.5.10f
• sgi irix 6.5.10m
• sgi irix 6.5.11
• sgi irix 6.5.11f
• sgi irix 6.5.11m
• sgi irix 6.5.12
• sgi irix 6.5.12f
• sgi irix 6.5.12m
• sgi irix 6.5.13
• sgi irix 6.5.13f
• sgi irix 6.5.13m
• sgi irix 6.5.14
• sgi irix 6.5.14f
• sgi irix 6.5.14m
• sgi irix 6.5.15
• sgi irix 6.5.15f
• sgi irix 6.5.15m
• sgi irix 6.5.16
• sgi irix 6.5.16f
• sgi irix 6.5.16m
• sgi irix 6.5.17
• sgi irix 6.5.17f
• sgi irix 6.5.17m
• sgi irix 6.5.18
• sgi irix 6.5.18f
• sgi irix 6.5.18m
• sgi irix 6.5.19
… and 2 more
References
- ftp://patches.sgi.com/support/free/security/advisories/20030404-01-P Patch, Vendor Advisory
- http://www.debian.org/security/2003/dsa-283 Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/111673 US Government Resource
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:047 www.mandriva.com
- ftp://patches.sgi.com/support/free/security/advisories/20030404-01-P Patch, Vendor Advisory
- http://www.debian.org/security/2003/dsa-283 Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/111673 US Government Resource
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:047 www.mandriva.com