SGI IRIX up to 6.5.20m DNS Callback authentication spoofing

Summaryinfo

A vulnerability was found in SGI IRIX. It has been classified as problematic. This impacts an unknown function of the component DNS Callback Handler. The manipulation leads to authentication spoofing. This vulnerability is documented as CVE-2003-0573. There is not any exploit available.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in SGI IRIX (Operating System). This issue affects an unknown code block of the component DNS Callback Handler. The manipulation with an unknown input leads to a authentication spoofing vulnerability. Using CWE to declare the problem leads to CWE-290. This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks. Impacted is availability. The summary by CVE is:

The DNS callbacks in nsd in SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, do not perform sufficient sanity checking, with unknown impact.

The issue has been introduced in 08/01/1998. The weakness was released 08/18/2003 (Website). It is possible to read the advisory at patches.sgi.com. The identification of this vulnerability is CVE-2003-0573 since 07/16/2003. The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. The technical details are unknown and an exploit is not publicly available.

The vulnerability was handled as a non-public zero-day exploit for at least 1843 days. During that time the estimated underground price was around $0-$5k.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Entries connected to this vulnerability are available at VDB-20672, VDB-20673 and VDB-20710. Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Operating System

Vendor

• SGI

Name

• IRIX

Version

• 6.5.1
• 6.5.2
• 6.5.3
• 6.5.4
• 6.5.5
• 6.5.6
• 6.5.7
• 6.5.8
• 6.5.9
• 6.5.10
• 6.5.11
• 6.5.12
• 6.5.13
• 6.5.14
• 6.5.15f
• 6.5.15m
• 6.5.16f
• 6.5.16m
• 6.5.17f
• 6.5.17m
• 6.5.18f
• 6.5.18m
• 6.5.19f
• 6.5.19m
• 6.5.20f
• 6.5.20m

License

• commercial

Support

• end of life (old version)

Website

• Vendor: http://www.sgi.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion