CVE-2000-0579: Low severity SGI IRIX vulnerability

Published Jun 21, 2000

Updated

IRIX crontab creates temporary files with predictable file names and with the umask of the user, which could allow local users to modify another user's crontab file as it is being edited.

Affected Software

2 affected components

SGI IRIX=6.3

SGI IRIX=6.5

Event History

Jun 21, 2000

CVE Published

04:00 AM

Oct 13, 2000

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2000-0579?

CVE-2000-0579 is classified as a moderate severity vulnerability due to the risk of local users modifying another user's crontab.

How do I fix CVE-2000-0579?

To fix CVE-2000-0579, users should apply the available patches from SGI or configure crontab to use a secure method of temporary file handling.

What versions of SGI IRIX are affected by CVE-2000-0579?

CVE-2000-0579 affects SGI IRIX versions 6.3 and 6.5.

Can CVE-2000-0579 be exploited remotely?

No, CVE-2000-0579 requires local access to exploit, making it a local privilege escalation vulnerability.

What does CVE-2000-0579 involve?

CVE-2000-0579 involves the creation of temporary files with predictable names, allowing local users to potentially interfere with crontab edits.