First published: Wed Apr 02 2003(Updated: )
rpcbind in SGI IRIX, when using the -w command line switch, allows local users to overwrite arbitrary files via a symlink attack.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
SGI IRIX | =6.5.16m | |
SGI IRIX | =6.5.6 | |
SGI IRIX | =6.5.1 | |
SGI IRIX | =6.5.10 | |
SGI IRIX | =6.5.17 | |
SGI IRIX | =6.5.13m | |
SGI IRIX | =6.5.12 | |
SGI IRIX | =6.5.9 | |
SGI IRIX | =6.5.17m | |
SGI IRIX | =6.5.15 | |
SGI IRIX | =6.5.14m | |
SGI IRIX | =6.5.3 | |
SGI IRIX | =6.5.14 | |
SGI IRIX | =6.5.8 | |
SGI IRIX | =6.5.5 | |
SGI IRIX | =6.5.4 | |
SGI IRIX | =6.5.15m | |
SGI IRIX | =6.5.11 | |
SGI IRIX | =6.5.2 | |
SGI IRIX | =6.5 | |
SGI IRIX | =6.5.7 | |
SGI IRIX | =6.5.13 | |
SGI IRIX | =6.5.16 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2002-1516 is considered a moderate severity vulnerability that allows potential local file overwriting.
To fix CVE-2002-1516, you should avoid using the rpcbind with the -w option and apply available security patches from SGI.
CVE-2002-1516 affects multiple versions of SGI IRIX, including versions 6.5.1, 6.5.6, and 6.5.17, among others.
CVE-2002-1516 is a local vulnerability and cannot be exploited by remote attackers.
CVE-2002-1516 allows local users to execute a symlink attack to overwrite arbitrary files.