CVE-2005-0464

Related Files

iDEFENSE Security Advisory 2005-04-07.1

Posted Apr 17, 2005

Authored by iDefense Labs | Site idefense.com

iDEFENSE Security Advisory 04.07.05 - Local exploitation of an information disclosure vulnerability in the gr_osview command included in multiple versions of Silicon Graphics Inc.'s IRIX Operating System could allow for the disclosure of sensitive information such as the root user's password hash. The vulnerability specifically exists in the way that gr_osview opens user-specified description files without dropping privileges. When this is combined with the debug option, it is possible to dump a line from an arbitrary file, regardless of its protection.

tags | advisory, arbitrary, local, root, info disclosure

systems | irix

advisories | CVE-2005-0464

SHA-256 | 33fd95497c6279b174df0ba9d86a06c156ff31e8632e7ad7b59db900e31cdda0

Download | Favorite | View