CVE-2005-0464: Low severity sgi irix vulnerability
grosview in SGI IRIX 6.5.22, and possibly other 6.5 versions, does not drop privileges when opening description files while in debug mode, which allows local users to read a line from arbitrary files via the -d and -D options, which prints the line as a formatting error.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2005-0464?
CVE-2005-0464 is classified as a medium severity vulnerability due to its potential for local users to read sensitive files.
How do I fix CVE-2005-0464?
To fix CVE-2005-0464, ensure that the SGI IRIX system is updated to a version where privilege dropping when opening description files is implemented.
Who is affected by CVE-2005-0464?
Local users of SGI IRIX 6.5.22 and possibly other 6.5 versions are affected by CVE-2005-0464.
What is the impact of CVE-2005-0464?
The impact of CVE-2005-0464 is that local users can access arbitrary files by exploiting the debug mode of gr_osview.
Is there a workaround for CVE-2005-0464?
A potential workaround for CVE-2005-0464 is to restrict access to the gr_osview tool or to avoid using debug mode.