CVE-2000-0245: Critical severity sgi irix vulnerability
Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
SGI IRIX objectserver daemonfrom your environment.Uninstall the SGI IRIX objectserver daemon if it is not required on the system.
- Configuration
Disable or stop the SGI IRIX objectserver daemon to prevent remote attackers from creating user accounts.
SGI IRIX objectserver daemon service_enabled = false - Compensating control
Restrict network access to the objectserver daemon (port/service) to trusted hosts only using host-based firewall rules, network ACLs or a perimeter firewall.
- Operational
Audit existing user accounts for unauthorized additions, remove or disable any suspicious accounts, and rotate credentials for affected accounts.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0245?
CVE-2000-0245 is considered a high severity vulnerability due to its exploitation potential allowing unauthorized user account creation.
How do I fix CVE-2000-0245?
To fix CVE-2000-0245, it is recommended to update the SGI IRIX operating system to the latest patches that address this vulnerability.
What versions of SGI IRIX are affected by CVE-2000-0245?
CVE-2000-0245 affects SGI IRIX versions 5.2, 5.3, 6.0, 6.0.1, 6.1, and 6.2.
Can CVE-2000-0245 be exploited remotely?
Yes, CVE-2000-0245 can be exploited by remote attackers to create user accounts without authentication.
Who are the attackers potentially benefiting from CVE-2000-0245?
Remote attackers can benefit from CVE-2000-0245 by gaining unauthorized access and creating accounts on vulnerable SGI IRIX systems.