gr_osview in SGI IRIX 6.5.22, and possibly other 6.5 versions, does not drop privileges when opening description files while in debug mode, which allows local users to read a line from arbitrary files via the -d and -D options, which prints the line as a formatting error.
References
Configurations
History
20 Nov 2024, 23:55
Type | Values Removed | Values Added |
---|---|---|
References | () ftp://patches.sgi.com/support/free/security/advisories/20050402-01-P - Patch | |
References | () http://secunia.com/advisories/14875 - | |
References | () http://securitytracker.com/id?1013662 - | |
References | () http://www.idefense.com/application/poi/display?id=226&type=vulnerabilities - Patch, Vendor Advisory | |
References | () http://www.osvdb.org/15351 - |
Information
Published : 2005-05-02 04:00
Updated : 2025-04-03 01:03
NVD link : CVE-2005-0464
Mitre link : CVE-2005-0464
CVE.ORG link : CVE-2005-0464
JSON object : View
Products Affected
sgi
- irix
CWE