CVE-2002-1516

Published: Apr 2, 2003Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

rpcbind in SGI IRIX, when using the -w command line switch, allows local users to overwrite arbitrary files via a symlink attack.

Affected (23)

Products: Sgi: Irix

1 product

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
Sgi Irix	Version 6.5.10
Sgi Irix	Version 6.5.11
Sgi Irix	Version 6.5.12
Sgi Irix	Version 6.5.13
Sgi Irix	Version 6.5.13m
Sgi Irix	Version 6.5.14
Sgi Irix	Version 6.5.14m
Sgi Irix	Version 6.5.15
Sgi Irix	Version 6.5.15m
Sgi Irix	Version 6.5.16
Sgi Irix	Version 6.5.16m
Sgi Irix	Version 6.5.17
Sgi Irix	Version 6.5.17m
Sgi Irix	Version 6.5.1
Sgi Irix	Version 6.5.2
Sgi Irix	Version 6.5.3
Sgi Irix	Version 6.5.4
Sgi Irix	Version 6.5.5
Sgi Irix	Version 6.5.6
Sgi Irix	Version 6.5.7
Sgi Irix	Version 6.5.8
Sgi Irix	Version 6.5.9
Sgi Irix	Version 6.5

References (8)

ftp://patches.sgi.com/support/free/security/advisories/20020903-01-P (unsafe URL)

Source: cve@mitre.org

http://www.ciac.org/ciac/bulletins/n-004.shtml

Source: cve@mitre.org

PatchVendor Advisory

http://www.iss.net/security_center/static/10272.php

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/5889

Source: cve@mitre.org

ftp://patches.sgi.com/support/free/security/advisories/20020903-01-P (unsafe URL)

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ciac.org/ciac/bulletins/n-004.shtml

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.iss.net/security_center/static/10272.php

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/5889

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.