CVE-2003-0177: Medium severity SGI IRIX vulnerability
SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, does not follow "-" entries in the /etc/group file, which may cause subsequent group membership entries to be processed inadvertently.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
For SGI IRIX 6.5.x through 6.5.20f (and possibly earlier), remove any '-' entries from /etc/group and avoid adding new '-' entries. Instead explicitly define group memberships to prevent inadvertent processing of subsequent group entries.
SGI IRIX /etc/group hyphen ('-') group entries = remove / do not use
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0177?
CVE-2003-0177 has been assigned a low severity rating due to its potential impact on group membership processing.
How do I fix CVE-2003-0177?
To fix CVE-2003-0177, ensure proper formatting in the /etc/group file and remove any problematic entries.
Which versions of SGI IRIX are affected by CVE-2003-0177?
CVE-2003-0177 affects SGI IRIX versions 6.5.1 through 6.5.20f, including earlier versions.
What is the main issue caused by CVE-2003-0177?
The main issue of CVE-2003-0177 is that certain entries in the /etc/group file are not processed correctly, potentially leading to unauthorized group memberships.
Is there a workaround for CVE-2003-0177 while a fix is being implemented?
Yes, a workaround for CVE-2003-0177 is to double-check and manually adjust the entries in the /etc/group file to ensure they comply with expected formats.