CVE-2002-0359 xfsmd for IRIX 6.5 through 6.5.16 uses weak authentication, which allows remote attackers to call dangerous RPC functions, including those that can mount or unmount xfs file systems, to gain root priv...
HighCVSS 10.0
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
xfsmd for IRIX 6.5 through 6.5.16 uses weak authentication, which allows remote attackers to call dangerous RPC functions, including those that can mount or unmount xfs file systems, to gain root privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sgi irix | = 6.2 | No fix listed |
| sgi irix | = 6.3 | No fix listed |
| sgi irix | = 6.4 | No fix listed |
| sgi irix | = 6.5 | No fix listed |
| sgi irix | = 6.5.1 | No fix listed |
| sgi irix | = 6.5.2 | No fix listed |
| sgi irix | = 6.5.2f | No fix listed |
| sgi irix | = 6.5.2m | No fix listed |
| sgi irix | = 6.5.3 | No fix listed |
| sgi irix | = 6.5.3f | No fix listed |
| sgi irix | = 6.5.3m | No fix listed |
| sgi irix | = 6.5.4 | No fix listed |
| sgi irix | = 6.5.4f | No fix listed |
| sgi irix | = 6.5.4m | No fix listed |
| sgi irix | = 6.5.5 | No fix listed |
| sgi irix | = 6.5.5f | No fix listed |
| sgi irix | = 6.5.5m | No fix listed |
| sgi irix | = 6.5.6 | No fix listed |
| sgi irix | = 6.5.6f | No fix listed |
| sgi irix | = 6.5.6m | No fix listed |
| sgi irix | = 6.5.7 | No fix listed |
| sgi irix | = 6.5.7f | No fix listed |
| sgi irix | = 6.5.7m | No fix listed |
| sgi irix | = 6.5.8 | No fix listed |
| sgi irix | = 6.5.8f | No fix listed |
Show 23 more
| Product | Affected versions | Fixed in |
|---|---|---|
| sgi irix | = 6.5.8m | No fix listed |
| sgi irix | = 6.5.9 | No fix listed |
| sgi irix | = 6.5.9f | No fix listed |
| sgi irix | = 6.5.9m | No fix listed |
| sgi irix | = 6.5.10 | No fix listed |
| sgi irix | = 6.5.10f | No fix listed |
| sgi irix | = 6.5.10m | No fix listed |
| sgi irix | = 6.5.11 | No fix listed |
| sgi irix | = 6.5.11f | No fix listed |
| sgi irix | = 6.5.11m | No fix listed |
| sgi irix | = 6.5.12 | No fix listed |
| sgi irix | = 6.5.12f | No fix listed |
| sgi irix | = 6.5.12m | No fix listed |
| sgi irix | = 6.5.13 | No fix listed |
| sgi irix | = 6.5.13f | No fix listed |
| sgi irix | = 6.5.13m | No fix listed |
| sgi irix | = 6.5.14 | No fix listed |
| sgi irix | = 6.5.14f | No fix listed |
| sgi irix | = 6.5.14m | No fix listed |
| sgi irix | = 6.5.15 | No fix listed |
| sgi irix | = 6.5.15f | No fix listed |
| sgi irix | = 6.5.15m | No fix listed |
| sgi irix | = 6.5.16 | No fix listed |
References
- 20020620 [LSD] IRIX rpc.xfsmd multiple remote root vulnerabilities mailing-list
- irix-xfsmd-bypass-authentication(9401) vdb-entry
- VU#521147 third-party-advisory us-government-resource
- 5072 vdb-entry