CVE-2003-0575 Heap-based buffer overflow in the name services daemon (nsd) in SGI IRIX 6.5.x through 6.5.21f, and possibly earlier versions, allows attackers to gain root privileges via the AUTH_UNIX gid list.
HighCVSS 10.0
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the name services daemon (nsd) in SGI IRIX 6.5.x through 6.5.21f, and possibly earlier versions, allows attackers to gain root privileges via the AUTH_UNIX gid list.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sgi irix | = 6.5 | No fix listed |
| sgi irix | = 6.5.1 | No fix listed |
| sgi irix | = 6.5.2 | No fix listed |
| sgi irix | = 6.5.3 | No fix listed |
| sgi irix | = 6.5.4 | No fix listed |
| sgi irix | = 6.5.5 | No fix listed |
| sgi irix | = 6.5.6 | No fix listed |
| sgi irix | = 6.5.7 | No fix listed |
| sgi irix | = 6.5.8 | No fix listed |
| sgi irix | = 6.5.9 | No fix listed |
| sgi irix | = 6.5.10 | No fix listed |
| sgi irix | = 6.5.11 | No fix listed |
| sgi irix | = 6.5.12 | No fix listed |
| sgi irix | = 6.5.13 | No fix listed |
| sgi irix | = 6.5.14 | No fix listed |
| sgi irix | = 6.5.15 | No fix listed |
| sgi irix | = 6.5.16 | No fix listed |
| sgi irix | = 6.5.17 | No fix listed |
| sgi irix | = 6.5.17f | No fix listed |
| sgi irix | = 6.5.17m | No fix listed |
| sgi irix | = 6.5.18 | No fix listed |
| sgi irix | = 6.5.18f | No fix listed |
| sgi irix | = 6.5.18m | No fix listed |
| sgi irix | = 6.5.19 | No fix listed |
| sgi irix | = 6.5.19f | No fix listed |
Show 7 more
| Product | Affected versions | Fixed in |
|---|---|---|
| sgi irix | = 6.5.19m | No fix listed |
| sgi irix | = 6.5.20 | No fix listed |
| sgi irix | = 6.5.20f | No fix listed |
| sgi irix | = 6.5.20m | No fix listed |
| sgi irix | = 6.5.21 | No fix listed |
| sgi irix | = 6.5.21f | No fix listed |
| sgi irix | = 6.5.21m | No fix listed |
References
- 20030730 [LSD] IRIX nsd remote buffer overflow vulnerability mailing-list
- 9390 third-party-advisory
- N-130 government-resource third-party-advisory
- VU#682900 third-party-advisory us-government-resource
- 2337 vdb-entry
- 8304 vdb-entry vendor-advisory
- irix-authunix-nsd-bo(12763) vdb-entry