|
|
Info |
Last Modified |
| about 1 year ago |
|
|
|
|
|
Description |
IRIX contains a flaw that may allow remote command execution. The issue is triggered when a malicious attacker utilizes the Webdist script (webdist.cgi) of the Out Box Environment Subsystem. The remote command execution occurs with the privileges of the httpd daemon. This flaw may lead to a loss of integrity.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Exploit:
Exploit Available
Disclosure:
OSVDB Verified
OSVDB:
Web Related
|
|
Solution |
Upgrade to version 6.5 or higher, as it has been reported to fix this vulnerability. Also, Silicon Graphics, Inc. has released a patch to address this issue. It is also possible to correct the flaw by implementing the following workaround:
#/bin/chmod 400 /var/www/cgi-bin/webdist.cgi
#/bin/chmod 400 /var/www/cgi-bin/handler
#/bin/chmod 400 /var/www/cgi-bin/wrap
|
|
Products |
|
IRIX
 |
6.2 |
6.3 |
6.4 |
5.3 |
6.0.x |
6.1 |
|
|
|
|
|
|
|
Credit |
Unknown or Incomplete
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
