CVE-2004-0134: High severity SGI IRIX vulnerability
Published Jun 3, 2004
·Updated
cpr (libcpr) in SGI IRIX before 6.5.25 allows local users to gain privileges by loading a user provided library while restarting the checkpointed process.
Affected Software
206 affected components
SGI IRIX=6.5.9f
SGI IRIX=6.5.16m
SGI IRIX=6.5.6
SGI IRIX=6.0.1
SGI IRIX=5.3
SGI IRIX=6.0.1
SGI IRIX=6.5.4m
SGI IRIX=4.0.5_iop
SGI IRIX=6.5.17f
SGI IRIX=6.5.3f
SGI IRIX=4.0
SGI IRIX=3.3.2
SGI IRIX=4.0.5h
SGI IRIX=6.5.1
SGI IRIX=6.5.14f
SGI IRIX=4.0.4
SGI IRIX=6.5.4f
SGI IRIX=4.0.1
SGI IRIX=6.5.10
SGI IRIX=6.5.17
SGI IRIX=6.1
SGI IRIX=6.5.13m
SGI IRIX=3.3.1
SGI IRIX=6.5.9m
SGI IRIX=6.5.12
SGI IRIX=6.5.23
SGI IRIX=6.5.10m
SGI IRIX=5.0.1
SGI IRIX=4.0.5e
SGI IRIX=6.5.15f
SGI IRIX=4.0.3
SGI IRIX=6.5.18f
SGI IRIX=5.1.1
SGI IRIX=6.5.19f
SGI IRIX=6.5.21
SGI IRIX=6.5.21f
SGI IRIX=4.0.5a
SGI IRIX=6.5.7m
SGI IRIX=3.3.3
SGI IRIX=6.5.9
SGI IRIX=6.4
SGI IRIX=6.5.21m
SGI IRIX=6.5.19
SGI IRIX=6.5.16f
SGI IRIX=6.5.13f
SGI IRIX=6.5.20
SGI IRIX=6.5.17m
SGI IRIX=4.0.5_ipr
SGI IRIX=6.5.20m
SGI IRIX=6.5.2f
SGI IRIX=5.0
SGI IRIX=6.5.2m
SGI IRIX=6.5.15
SGI IRIX=6.5.8m
SGI IRIX=6.5.12f
SGI IRIX=6.5.6f
SGI IRIX=4.0.1t
SGI IRIX=6.5.7f
SGI IRIX=6.5.14m
SGI IRIX=6.5.3
SGI IRIX=5.1
SGI IRIX=6.5.14
SGI IRIX=4.0.5f
SGI IRIX=6.5.3m
SGI IRIX=6.5.8
SGI IRIX=4.0.5b
SGI IRIX=6.5.22m
SGI IRIX=6.5.19m
SGI IRIX=6.5.20f
SGI IRIX=6.5.5
SGI IRIX=4.0.5g
SGI IRIX=5.2
SGI IRIX=6.5.4
SGI IRIX=6.5.15m
SGI IRIX=6.5.11f
SGI IRIX=6.5_20
SGI IRIX=6.5.24
SGI IRIX=6.5.11
SGI IRIX=6.0
SGI IRIX=6.5.11m
SGI IRIX=6.3
SGI IRIX=6.5.6m
SGI IRIX=4.0.5
SGI IRIX=3.3
SGI IRIX=4.0.4b
SGI IRIX=6.5.2
SGI IRIX=6.5.8f
SGI IRIX=6.5.5f
SGI IRIX=6.5
SGI IRIX=6.5.7
SGI IRIX=6.5.18
SGI IRIX=5.3
SGI IRIX=6.5.18m
SGI IRIX=6.5.22
SGI IRIX=6.2
SGI IRIX=4.0.2
SGI IRIX=4.0.4t
SGI IRIX=6.5.10f
SGI IRIX=6.5.5m
SGI IRIX=6.5.13
SGI IRIX=6.5.12m
SGI IRIX=6.5.16
SGI IRIX=3.2
SGI IRIX=3.2
SGI IRIX=3.3
SGI IRIX=3.3.1
SGI IRIX=3.3.2
SGI IRIX=3.3.3
SGI IRIX=4.0
SGI IRIX=4.0.1
SGI IRIX=4.0.1t
SGI IRIX=4.0.2
SGI IRIX=4.0.3
SGI IRIX=4.0.4
SGI IRIX=4.0.4b
SGI IRIX=4.0.4t
SGI IRIX=4.0.5
SGI IRIX=4.0.5_iop
SGI IRIX=4.0.5_ipr
SGI IRIX=4.0.5a
SGI IRIX=4.0.5b
SGI IRIX=4.0.5e
SGI IRIX=4.0.5f
SGI IRIX=4.0.5g
SGI IRIX=4.0.5h
SGI IRIX=5.0
SGI IRIX=5.0.1
SGI IRIX=5.1
SGI IRIX=5.1.1
SGI IRIX=5.2
SGI IRIX=5.3
SGI IRIX=5.3
SGI IRIX=6.0
SGI IRIX=6.0.1
SGI IRIX=6.0.1
SGI IRIX=6.1
SGI IRIX=6.2
SGI IRIX=6.3
SGI IRIX=6.4
SGI IRIX=6.5
SGI IRIX=6.5.1
SGI IRIX=6.5.2
SGI IRIX=6.5.2f
SGI IRIX=6.5.2m
SGI IRIX=6.5.3
SGI IRIX=6.5.3f
SGI IRIX=6.5.3m
SGI IRIX=6.5.4
SGI IRIX=6.5.4f
SGI IRIX=6.5.4m
SGI IRIX=6.5.5
SGI IRIX=6.5.5f
SGI IRIX=6.5.5m
SGI IRIX=6.5.6
SGI IRIX=6.5.6f
SGI IRIX=6.5.6m
SGI IRIX=6.5.7
SGI IRIX=6.5.7f
SGI IRIX=6.5.7m
SGI IRIX=6.5.8
SGI IRIX=6.5.8f
SGI IRIX=6.5.8m
SGI IRIX=6.5.9
SGI IRIX=6.5.9f
SGI IRIX=6.5.9m
SGI IRIX=6.5.10
SGI IRIX=6.5.10f
SGI IRIX=6.5.10m
SGI IRIX=6.5.11
SGI IRIX=6.5.11f
SGI IRIX=6.5.11m
SGI IRIX=6.5.12
SGI IRIX=6.5.12f
SGI IRIX=6.5.12m
SGI IRIX=6.5.13
SGI IRIX=6.5.13f
SGI IRIX=6.5.13m
SGI IRIX=6.5.14
SGI IRIX=6.5.14f
SGI IRIX=6.5.14m
SGI IRIX=6.5.15
SGI IRIX=6.5.15f
SGI IRIX=6.5.15m
SGI IRIX=6.5.16
SGI IRIX=6.5.16f
SGI IRIX=6.5.16m
SGI IRIX=6.5.17
SGI IRIX=6.5.17f
SGI IRIX=6.5.17m
SGI IRIX=6.5.18
SGI IRIX=6.5.18f
SGI IRIX=6.5.18m
SGI IRIX=6.5.19
SGI IRIX=6.5.19f
SGI IRIX=6.5.19m
SGI IRIX=6.5.20
SGI IRIX=6.5.20f
SGI IRIX=6.5.20m
SGI IRIX=6.5.21
SGI IRIX=6.5.21f
SGI IRIX=6.5.21m
SGI IRIX=6.5.22
SGI IRIX=6.5.22m
SGI IRIX=6.5.23
SGI IRIX=6.5.24
SGI IRIX=6.5_20
Event History
Jun 3, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0134?
The severity of CVE-2004-0134 is considered moderate, allowing local users to gain elevated privileges.
2
How do I fix CVE-2004-0134?
To fix CVE-2004-0134, update your SGI IRIX system to version 6.5.25 or later.
3
Who is affected by CVE-2004-0134?
CVE-2004-0134 affects local users on SGI IRIX versions prior to 6.5.25.
4
What are the consequences of exploiting CVE-2004-0134?
Exploiting CVE-2004-0134 allows unauthorized local users to load arbitrary libraries and gain privileges.
5
Is CVE-2004-0134 a network vulnerability?
No, CVE-2004-0134 is not a network vulnerability; it is a local privilege escalation vulnerability.