IRIX contains a flaw that may allow a malicious local user to manipulate arbitrary files on the system. The issue is due to the LicenseManager creating files insecurely. It is possible for a user to set an environment variable and use a symlink style attack, resulting in a loss of integrity.
Classification
Location:
Local Access Required
Attack Type:
Race Condition
Impact:
Loss of Integrity
Exploit:
Exploit Public
Solution
Upgrade to version 6.4 or higher, as it has been reported to fix this vulnerability. It is also possible to correct the flaw by implementing the following workaround: prevent the execution of admintool.
#chmod 400 /usr/bin/admintool
Also, Silicon Graphics, Inc. has released patches that address this vulnerability.
t1.chem.umn.edu -
