CVE-2003-0683: High severity SGI IRIX vulnerability
NFS in SGI 6.5.21m and 6.5.21f does not perform access checks in certain configurations when an /etc/exports entry uses wildcards without any hostnames or groups, which could allow attackers to bypass intended restrictions.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Remove or replace any /etc/exports entry that uses wildcards without listing any hostnames or groups. Update the export entry to explicitly list allowed hostnames or groups so that NFS access checks will be enforced.
NFS (/etc/exports) /etc/exports entries = no wildcard-only entries; specify allowed hostnames or groups - Operational
Audit /etc/exports on SGI IRIX systems (notably 6.5.21m and 6.5.21f) for entries containing wildcards with no hostnames or groups; correct those entries to specify allowed hosts/groups.
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0683?
CVE-2003-0683 has a moderate severity due to potential unauthorized access to NFS shares.
How do I fix CVE-2003-0683?
To fix CVE-2003-0683, ensure specific hostnames or groups are used in the /etc/exports configuration instead of wildcards.
What systems are affected by CVE-2003-0683?
CVE-2003-0683 affects SGI IRIX versions 6.5.21m and 6.5.21f.
What exploits exist for CVE-2003-0683?
Exploiting CVE-2003-0683 can allow attackers to bypass access controls and gain unauthorized access to filesystems.
Is CVE-2003-0683 still a risk for modern systems?
CVE-2003-0683 is primarily a risk for legacy systems running SGI IRIX and is unlikely to affect modern systems.