CVE-2000-0013: High severity SGI IRIX vulnerability
IRIX soundplayer program allows local users to gain privileges by including shell metacharacters in a .wav file, which is executed via the midikeys program.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
sgi/irix/midikeys (soundplayer)from your environment.Uninstall or remove the IRIX soundplayer/midikeys program from affected systems or otherwise disable its executable to prevent processing of .wav files that can include shell metacharacters.
- Compensating control
Prevent untrusted local users from executing midikeys: restrict execute permissions on the midikeys binary to trusted administrator accounts (remove execute permission for non-privileged users) or otherwise restrict access to the binary via filesystem permissions or local host access controls.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0013?
CVE-2000-0013 is considered to have a high severity due to the potential for local privilege escalation.
How do I fix CVE-2000-0013?
To fix CVE-2000-0013, users should ensure that the IRIX soundplayer program is updated to a version that eliminates the exploitation of shell metacharacters.
Who is affected by CVE-2000-0013?
CVE-2000-0013 affects local users of SGI IRIX version 6.2 who can interact with the soundplayer program.
What type of vulnerability is CVE-2000-0013?
CVE-2000-0013 is a local privilege escalation vulnerability caused by improper handling of input in the soundplayer program.
Is CVE-2000-0013 still a concern today?
While CVE-2000-0013 is an older vulnerability, systems still running IRIX 6.2 may still be at risk if not patched.