First published: Tue Dec 31 2002(Updated: )
SGI IRIX 6.5 through 6.5.14 applies a umask of 022 to root core dumps, which allows local users to read the core dumps and possibly obtain sensitive information.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
SGI IRIX | =6.5.6 | |
SGI IRIX | =6.5.1 | |
SGI IRIX | =6.5.10 | |
SGI IRIX | =6.5.12 | |
SGI IRIX | =6.5.9 | |
SGI IRIX | =6.5.3 | |
SGI IRIX | =6.5.14 | |
SGI IRIX | =6.5.8 | |
SGI IRIX | =6.5.5 | |
SGI IRIX | =6.5.4 | |
SGI IRIX | =6.5.11 | |
SGI IRIX | =6.5.2 | |
SGI IRIX | =6.5 | |
SGI IRIX | =6.5.7 | |
SGI IRIX | =6.5.13 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2002-1786 has a moderate severity rating due to the exposure of sensitive information.
Fix CVE-2002-1786 by changing the umask for root core dumps to a more restrictive value.
CVE-2002-1786 affects SGI IRIX versions 6.5 through 6.5.14.
Yes, local users can exploit CVE-2002-1786 to read root core dumps and potentially access sensitive information.
Yes, CVE-2002-1786 is directly related to the umask setting that affects file permissions for root core dumps.