CVE-2002-1516: Medium severity SGI IRIX vulnerability
Published Apr 2, 2003
·Updated
rpcbind in SGI IRIX, when using the -w command line switch, allows local users to overwrite arbitrary files via a symlink attack.
Affected Software
23 affected components
SGI IRIX=6.5.16m
SGI IRIX=6.5.6
SGI IRIX=6.5.1
SGI IRIX=6.5.10
SGI IRIX=6.5.17
SGI IRIX=6.5.13m
SGI IRIX=6.5.12
SGI IRIX=6.5.9
SGI IRIX=6.5.17m
SGI IRIX=6.5.15
SGI IRIX=6.5.14m
SGI IRIX=6.5.3
SGI IRIX=6.5.14
SGI IRIX=6.5.8
SGI IRIX=6.5.5
SGI IRIX=6.5.4
SGI IRIX=6.5.15m
SGI IRIX=6.5.11
SGI IRIX=6.5.2
SGI IRIX=6.5
SGI IRIX=6.5.7
SGI IRIX=6.5.13
SGI IRIX=6.5.16
Remediation
Patch Available
Patch Available
Event History
Apr 2, 2003
CVE Published
05:00 AM
Sep 1, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1516?
CVE-2002-1516 is considered a moderate severity vulnerability that allows potential local file overwriting.
2
How do I fix CVE-2002-1516?
To fix CVE-2002-1516, you should avoid using the rpcbind with the -w option and apply available security patches from SGI.
3
Which versions of SGI IRIX are affected by CVE-2002-1516?
CVE-2002-1516 affects multiple versions of SGI IRIX, including versions 6.5.1, 6.5.6, and 6.5.17, among others.
4
Can CVE-2002-1516 be exploited by remote attackers?
CVE-2002-1516 is a local vulnerability and cannot be exploited by remote attackers.
5
What type of attack is enabled by CVE-2002-1516?
CVE-2002-1516 allows local users to execute a symlink attack to overwrite arbitrary files.