First published: Thu Mar 28 2002(Updated: )
Vulnerability in SGI IRIX 6.5.11 through 6.5.15f allows local users to cause privileged applications to dump core via the HOSTALIASES environment variable, which might allow the users to gain privileges.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
SGI IRIX | =6.5.6 | |
SGI IRIX | =6.5.1 | |
SGI IRIX | =6.5.14f | |
SGI IRIX | =6.5.10 | |
SGI IRIX | =6.5.13m | |
SGI IRIX | =6.5.15f | |
SGI IRIX | =6.5.9 | |
SGI IRIX | =6.5.13f | |
SGI IRIX | =6.5.12f | |
SGI IRIX | =6.5.14m | |
SGI IRIX | =6.5.3 | |
SGI IRIX | =6.5.8 | |
SGI IRIX | =6.5.5 | |
SGI IRIX | =6.5.4 | |
SGI IRIX | =6.5.15m | |
SGI IRIX | =6.5.11f | |
SGI IRIX | =6.5.11m | |
SGI IRIX | =6.5.2 | |
SGI IRIX | =6.5 | |
SGI IRIX | =6.5.7 | |
SGI IRIX | =6.5.12m |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2002-0040 is classified as having a moderate severity level, as it could potentially let local users escalate privileges.
To fix CVE-2002-0040, update your SGI IRIX to a version beyond 6.5.15f or apply patches provided by SGI.
CVE-2002-0040 affects SGI IRIX versions from 6.5.1 to 6.5.15f, including intermediate versions.
CVE-2002-0040 cannot be exploited remotely as it requires local user access to the system.
The potential impacts of CVE-2002-0040 include unauthorized privilege escalation and system instability due to core dumps.