CVE-2002-0174: High severity SGI IRIX vulnerability
Published May 29, 2002
·Updated
nsd on SGI IRIX before 6.5.11 allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the nsd.dump file.
Affected Software
11 affected components
SGI IRIX=6.5.6
SGI IRIX=6.5.1
SGI IRIX=6.5.10
SGI IRIX=6.5.9
SGI IRIX=6.5.3
SGI IRIX=6.5.8
SGI IRIX=6.5.5
SGI IRIX=6.5.4
SGI IRIX=6.5.2
SGI IRIX=6.5
SGI IRIX=6.5.7
Event History
May 29, 2002
CVE Published
04:00 AM
Apr 2, 2003
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-0174?
CVE-2002-0174 is classified as a high severity vulnerability due to its potential to allow local users to gain root privileges.
2
How do I fix CVE-2002-0174?
To fix CVE-2002-0174, upgrade SGI IRIX to version 6.5.11 or later, which addresses the symlink attack vulnerability.
3
Which versions of SGI IRIX are affected by CVE-2002-0174?
CVE-2002-0174 affects SGI IRIX versions 6.5.1 to 6.5.10.
4
What is a symlink attack in relation to CVE-2002-0174?
A symlink attack in CVE-2002-0174 involves creating a symbolic link to overwrite the nsd.dump file, potentially allowing privilege escalation.
5
Is CVE-2002-0174 exploitable locally or remotely?
CVE-2002-0174 is exploitable locally by users who have access to the system.