CVE-2002-0358: Medium severity sgi mediamail vulnerability
Published Jul 26, 2002
·Updated
MediaMail and MediaMail Pro in SGI IRIX 6.5.16 and earlier allows local users to force the program to dump core via certain arguments, which could allow the users to read sensitive data or gain privileges.
Affected Software
2 affected components
SGI MediaMail
SGI MediaMail
Remediation
Event History
Jul 26, 2002
CVE Published
04:00 AM
Apr 2, 2003
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-0358?
CVE-2002-0358 is classified as a medium severity vulnerability.
2
How do I fix CVE-2002-0358?
To mitigate CVE-2002-0358, update SGI MediaMail to a version later than 6.5.16.
3
Who is affected by CVE-2002-0358?
Local users on systems running SGI IRIX 6.5.16 and earlier are affected by CVE-2002-0358.
4
What type of attack is CVE-2002-0358 associated with?
CVE-2002-0358 is associated with local privilege escalation and information disclosure attacks.
5
What systems are vulnerable to CVE-2002-0358?
SGI MediaMail and MediaMail Pro running on SGI IRIX versions prior to 6.5.16 are vulnerable to CVE-2002-0358.