CVE-2002-0040: Low severity SGI IRIX vulnerability
Published Mar 28, 2002
·Updated
Vulnerability in SGI IRIX 6.5.11 through 6.5.15f allows local users to cause privileged applications to dump core via the HOSTALIASES environment variable, which might allow the users to gain privileges.
Affected Software
21 affected components
SGI IRIX=6.5.6
SGI IRIX=6.5.1
SGI IRIX=6.5.14f
SGI IRIX=6.5.10
SGI IRIX=6.5.13m
SGI IRIX=6.5.15f
SGI IRIX=6.5.9
SGI IRIX=6.5.13f
SGI IRIX=6.5.12f
SGI IRIX=6.5.14m
SGI IRIX=6.5.3
SGI IRIX=6.5.8
SGI IRIX=6.5.5
SGI IRIX=6.5.4
SGI IRIX=6.5.15m
SGI IRIX=6.5.11f
SGI IRIX=6.5.11m
SGI IRIX=6.5.2
SGI IRIX=6.5
SGI IRIX=6.5.7
SGI IRIX=6.5.12m
Remediation
Event History
Mar 28, 2002
CVE Published
05:00 AM
Jun 25, 2002
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-0040?
CVE-2002-0040 is classified as having a moderate severity level, as it could potentially let local users escalate privileges.
2
How do I fix CVE-2002-0040?
To fix CVE-2002-0040, update your SGI IRIX to a version beyond 6.5.15f or apply patches provided by SGI.
3
Which versions of SGI IRIX are affected by CVE-2002-0040?
CVE-2002-0040 affects SGI IRIX versions from 6.5.1 to 6.5.15f, including intermediate versions.
4
Can CVE-2002-0040 be exploited remotely?
CVE-2002-0040 cannot be exploited remotely as it requires local user access to the system.
5
What are the potential impacts of CVE-2002-0040?
The potential impacts of CVE-2002-0040 include unauthorized privilege escalation and system instability due to core dumps.