CVE-2003-0173: High severity SGI IRIX vulnerability
Published Apr 15, 2003
·Updated
xfsdq in xfsdump does not create quota information files securely, which allows local users to gain root privileges.
Affected Software
62 affected components
SGI IRIX=6.5.9f
xfsdump xfsdump=2.0.3
SGI IRIX=6.5.16m
SGI IRIX=6.5.6
xfsdump xfsdump=2.0.1
SGI IRIX=6.5.4m
SGI IRIX=6.5.17f
SGI IRIX=6.5.3f
SGI IRIX=6.5.1
SGI IRIX=6.5.13f
SGI IRIX=6.5.16f
SGI IRIX=6.5.19f
SGI IRIX=6.5.9
SGI IRIX=6.5.9m
SGI IRIX=6.5.12
SGI IRIX=6.5.17
SGI IRIX=6.5.17m
SGI IRIX=6.5.4f
xfsdump xfsdump=2.0.4
SGI IRIX=6.5.14f
SGI IRIX=6.5.7m
SGI IRIX=6.5.10
SGI IRIX=6.5.10m
SGI IRIX=6.5.13m
SGI IRIX=6.5.15f
SGI IRIX=6.5.18f
SGI IRIX=6.5.19
xfsdump xfsdump=2.0.0
xfsdump xfsdump=2.0.2
SGI IRIX=6.5.10f
SGI IRIX=6.5.11
SGI IRIX=6.5.12m
SGI IRIX=6.5.15m
SGI IRIX=6.5.18
SGI IRIX=6.5.18m
SGI IRIX=6.5.3
SGI IRIX=6.5.3m
SGI IRIX=6.5.6m
SGI IRIX=6.5.11f
SGI IRIX=6.5.11m
SGI IRIX=6.5.12f
SGI IRIX=6.5.5
SGI IRIX=6.5.5f
xfsdump xfsdump=2.0.5
SGI IRIX=6.5
SGI IRIX=6.5.14
SGI IRIX=6.5.14m
SGI IRIX=6.5.15
SGI IRIX=6.5.19m
SGI IRIX=6.5.2
SGI IRIX=6.5.2f
SGI IRIX=6.5.2m
SGI IRIX=6.5.7
SGI IRIX=6.5.7f
SGI IRIX=6.5.8
SGI IRIX=6.5.8f
SGI IRIX=6.5.13
SGI IRIX=6.5.16
SGI IRIX=6.5.4
SGI IRIX=6.5.5m
SGI IRIX=6.5.6f
SGI IRIX=6.5.8m
Remediation
Patch Available
Event History
Apr 15, 2003
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
May 5, 2003
Data Sourced
via NVD·04:00 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2003-0173?
CVE-2003-0173 is considered to have a high severity level due to the potential for local users to gain root privileges.
2
How do I fix CVE-2003-0173?
To fix CVE-2003-0173, upgrade xfsdump to a version that is not affected by the vulnerability.
3
Which versions are affected by CVE-2003-0173?
CVE-2003-0173 affects xfsdump versions 2.0.0 through 2.0.5 and various versions of SGI IRIX from 6.5 to 6.5.19.
4
Can this vulnerability be exploited remotely in CVE-2003-0173?
No, CVE-2003-0173 requires local access to the system for exploitation.
5
What systems are vulnerable to CVE-2003-0173?
CVE-2003-0173 primarily affects systems running xfsdump and various versions of SGI IRIX.