CVE-2000-0283: Medium severity sgi irix vulnerability
The default installation of IRIX Performance Copilot allows remote attackers to access sensitive system information via the pmcd daemon.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
SGI IRIX Performance Copilotfrom your environment.Uninstall IRIX Performance Copilot if it is not required to eliminate the vulnerable pmcd daemon.
- Configuration
Disable the pmcd daemon (stop the service and remove it from startup) to prevent remote access to performance data.
pmcd daemon (IRIX Performance Copilot) enabled = false - Compensating control
Restrict network access to the pmcd daemon to trusted hosts by configuring firewall rules or network ACLs to block or limit remote access to the pmcd service.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0283?
CVE-2000-0283 is considered a high severity vulnerability due to its ability to allow remote attackers access to sensitive system information.
How do I fix CVE-2000-0283?
To fix CVE-2000-0283, you should configure the pmcd daemon to restrict access and apply the latest patches provided by SGI.
Which versions of IRIX are affected by CVE-2000-0283?
CVE-2000-0283 affects default installations of IRIX versions 6.2 through 6.5.6.
What is the impact of not addressing CVE-2000-0283?
Failure to address CVE-2000-0283 can lead to unauthorized access to sensitive system information, potentially compromising system security.
Is there a workaround for CVE-2000-0283?
Yes, a temporary workaround for CVE-2000-0283 includes disabling the pmcd daemon to prevent access until a patch can be applied.