CVE-2000-0799: Low severity SGI IRIX vulnerability
Published Oct 20, 2000
·Updated
inpview in InPerson in SGI IRIX 5.3 through IRIX 6.5.10 allows local users to gain privileges via a symlink attack on the .ilmpAAA temporary file.
Affected Software
10 affected components
SGI IRIX=6.5
SGI IRIX=6.5.1
SGI IRIX=6.5.2m
SGI IRIX=6.5.3
SGI IRIX=6.5.3f
SGI IRIX=6.5.3m
SGI IRIX=6.5.4
SGI IRIX=6.5.6
SGI IRIX=6.5.7
SGI IRIX=6.5.8
Event History
Oct 20, 2000
CVE Published
04:00 AM
Sep 18, 2001
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2000-0799?
CVE-2000-0799 is considered to be a high severity vulnerability due to its local privilege escalation potential.
2
How do I fix CVE-2000-0799?
To mitigate CVE-2000-0799, ensure that the affected versions of InPerson are updated to a secure release that addresses this symlink vulnerability.
3
What types of systems are affected by CVE-2000-0799?
CVE-2000-0799 affects SGI IRIX systems from version 5.3 through to 6.5.10.
4
What is a symlink attack in the context of CVE-2000-0799?
A symlink attack in CVE-2000-0799 involves exploiting the temporary file creation process to gain unauthorized privileges.
5
Can CVE-2000-0799 be exploited remotely?
CVE-2000-0799 requires local access to the system, making it not exploitable remotely.