CVE-2003-0575: Buffer Overflow
Published Aug 1, 2003
·Updated
Heap-based buffer overflow in the name services daemon (nsd) in SGI IRIX 6.5.x through 6.5.21f, and possibly earlier versions, allows attackers to gain root privileges via the AUTHUNIX gid list.
Affected Software
32 affected components
SGI IRIX=6.5
SGI IRIX=6.5.1
SGI IRIX=6.5.2
SGI IRIX=6.5.3
SGI IRIX=6.5.4
SGI IRIX=6.5.5
SGI IRIX=6.5.6
SGI IRIX=6.5.7
SGI IRIX=6.5.8
SGI IRIX=6.5.9
SGI IRIX=6.5.10
SGI IRIX=6.5.11
SGI IRIX=6.5.12
SGI IRIX=6.5.13
SGI IRIX=6.5.14
SGI IRIX=6.5.15
SGI IRIX=6.5.16
SGI IRIX=6.5.17
SGI IRIX=6.5.17f
SGI IRIX=6.5.17m
SGI IRIX=6.5.18
SGI IRIX=6.5.18f
SGI IRIX=6.5.18m
SGI IRIX=6.5.19
SGI IRIX=6.5.19f
SGI IRIX=6.5.19m
SGI IRIX=6.5.20
SGI IRIX=6.5.20f
SGI IRIX=6.5.20m
SGI IRIX=6.5.21
SGI IRIX=6.5.21f
SGI IRIX=6.5.21m
Remediation
Event History
Aug 1, 2003
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Aug 27, 2003
Data Sourced
via NVD·04:00 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2003-0575?
CVE-2003-0575 is considered to have high severity due to potential root privilege escalation.
2
How do I fix CVE-2003-0575?
To fix CVE-2003-0575, upgrade the SGI IRIX system to a patched version that addresses the heap-based buffer overflow.
3
What versions of SGI IRIX are affected by CVE-2003-0575?
SGI IRIX versions 6.5.1 through 6.5.21f are affected by CVE-2003-0575.
4
What type of vulnerability is CVE-2003-0575?
CVE-2003-0575 is a heap-based buffer overflow vulnerability in the name services daemon.
5
Can CVE-2003-0575 allow attackers to access sensitive information?
Yes, CVE-2003-0575 can lead to unauthorized root access, allowing attackers to access sensitive information.