CVE-2000-0578: Low severity SGI MIPSPro compilers vulnerability

Published Jun 21, 2000

Updated

SGI MIPSPro compilers C, C++, F77 and F90 generate temporary files in /tmp with predictable file names, which could allow local users to insert malicious contents into these files as they are being compiled by another user.

Affected Software

2 affected components

SGI MIPSPro compilers=7.1

SGI MIPSPro compilers=7.2.1

Event History

Jun 21, 2000

CVE Published

04:00 AM

Jul 19, 2000

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2000-0578?

CVE-2000-0578 is classified as a high severity vulnerability due to the risk of local users exploiting predictable temporary file names.

How do I fix CVE-2000-0578?

To fix CVE-2000-0578, update to a later version of SGI MIPSPro compilers that generates unpredictable temporary file names.

Who is affected by CVE-2000-0578?

CVE-2000-0578 affects users of SGI MIPSPro compilers version 7.1 and 7.2.1.

What risks are associated with CVE-2000-0578?

The risks associated with CVE-2000-0578 include the potential for local attackers to inject malicious content into the temporary files during compilation.

Is CVE-2000-0578 still relevant today?

While CVE-2000-0578 primarily affects older versions of SGI MIPSPro compilers, it highlights ongoing concerns regarding secure temporary file handling in software development.