SGI IRIX up to 6.5.8 InPerson .ilmpAAA symlink

Summaryinfo

A vulnerability identified as problematic has been detected in SGI IRIX up to 6.5.8. This affects an unknown part of the file .ilmpAAA of the component InPerson. The manipulation leads to symlink. This vulnerability is documented as CVE-2000-0799. Additionally, an exploit exists. You should upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in SGI IRIX up to 6.5.8 (Operating System). This issue affects some unknown functionality of the file .ilmpAAA of the component InPerson. The manipulation with an unknown input leads to a symlink vulnerability. Using CWE to declare the problem leads to CWE-61. The product, when opening a file or directory, does not sufficiently account for when the file is a symbolic link that resolves to a target outside of the intended control sphere. This could allow an attacker to cause the product to operate on unauthorized files. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

inpview in InPerson in SGI IRIX 5.3 through IRIX 6.5.10 allows local users to gain privileges via a symlink attack on the .ilmpAAA temporary file.

The issue has been introduced in 11/01/1994. The weakness was released 10/20/2000 (Website). The advisory is shared at securityfocus.com. The identification of this vulnerability is CVE-2000-0799. The exploitation is known to be difficult. An attack has to be approached locally. No form of authentication is needed for a successful exploitation. Technical details as well as a public exploit are known.

A public exploit has been developed in ANSI C. The exploit is available at securityfocus.com. It is declared as proof-of-concept. The vulnerability was handled as a non-public zero-day exploit for at least 2180 days. During that time the estimated underground price was around $0-$5k.

Upgrading eliminates this vulnerability.

The vulnerability is also documented in the databases at X-Force (5065), Exploit-DB (20130) and SecurityFocus (BID 1530†). Entries connected to this vulnerability are available at VDB-15937 and VDB-15938. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Operating System

Vendor

• SGI

Name

• IRIX

Version

• 6.5
• 6.5.1
• 6.5.2m
• 6.5.3
• 6.5.3f
• 6.5.3m
• 6.5.4
• 6.5.6
• 6.5.7
• 6.5.8

License

• commercial

Support

• end of life (old version)

Website

• Vendor: http://www.sgi.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion