SGI IRIX root creates core dumps with insecure permissions
| irix-root-coredumps (10138) |  Medium Risk |
Description:
SGI IRIX applies the default umask setting to system core dumps. A core dump generated by a root user would be assigned a umask of 022, which would make them readable by unprivileged users. This could allow a local attacker with limited system privileges to gain sensitive information that could possibly be used to gain elevated privileges on the system.
Platforms Affected:
- SGI, IRIX 6.5
- SGI, IRIX 6.5 20
- SGI, IRIX 6.5.1
- SGI, IRIX 6.5.10
- SGI, IRIX 6.5.10f
- SGI, IRIX 6.5.10m
- SGI, IRIX 6.5.11
- SGI, IRIX 6.5.11f
- SGI, IRIX 6.5.11m
- SGI, IRIX 6.5.12
- SGI, IRIX 6.5.12f
- SGI, IRIX 6.5.12m
- SGI, IRIX 6.5.13
- SGI, IRIX 6.5.13f
- SGI, IRIX 6.5.13m
- SGI, IRIX 6.5.14
- SGI, IRIX 6.5.14f
- SGI, IRIX 6.5.14m
- SGI, IRIX 6.5.15
- SGI, IRIX 6.5.15f
- SGI, IRIX 6.5.15m
- SGI, IRIX 6.5.16
- SGI, IRIX 6.5.16f
- SGI, IRIX 6.5.16m
- SGI, IRIX 6.5.17
- SGI, IRIX 6.5.17f
- SGI, IRIX 6.5.17m
- SGI, IRIX 6.5.18
- SGI, IRIX 6.5.18f
- SGI, IRIX 6.5.18m
- SGI, IRIX 6.5.19
- SGI, IRIX 6.5.19f
- SGI, IRIX 6.5.19m
- SGI, IRIX 6.5.2
- SGI, IRIX 6.5.20
- SGI, IRIX 6.5.20f
- SGI, IRIX 6.5.20m
- SGI, IRIX 6.5.21
- SGI, IRIX 6.5.21f
- SGI, IRIX 6.5.21m
- SGI, IRIX 6.5.22
- SGI, IRIX 6.5.22m
- SGI, IRIX 6.5.23
- SGI, IRIX 6.5.23m
- SGI, IRIX 6.5.24
- SGI, IRIX 6.5.24m
- SGI, IRIX 6.5.25
- SGI, IRIX 6.5.26
- SGI, IRIX 6.5.27
- SGI, IRIX 6.5.28
- SGI, IRIX 6.5.2f
- SGI, IRIX 6.5.2m
- SGI, IRIX 6.5.3
- SGI, IRIX 6.5.3f
- SGI, IRIX 6.5.3m
- SGI, IRIX 6.5.4
- SGI, IRIX 6.5.4f
- SGI, IRIX 6.5.4m
- SGI, IRIX 6.5.5
- SGI, IRIX 6.5.5f
- SGI, IRIX 6.5.5m
- SGI, IRIX 6.5.6
- SGI, IRIX 6.5.6f
- SGI, IRIX 6.5.6m
- SGI, IRIX 6.5.7
- SGI, IRIX 6.5.7f
- SGI, IRIX 6.5.7m
- SGI, IRIX 6.5.8
- SGI, IRIX 6.5.8f
- SGI, IRIX 6.5.8m
- SGI, IRIX 6.5.9
- SGI, IRIX 6.5.9f
- SGI, IRIX 6.5.9m
Remedy:
Upgrade to the latest version of IRIX (6.5.18 or later), as listed in SGI Security Advisory 20020902-01-I. See References.
Consequences:
Obtain Information
References:
- SGI Security Advisory 20020902-01-I, IRIX default root umask and coredumps at ftp://patches.sgi.com/support/free/security/advisories/20020902-01-I.
- BID-5737: SGI IRIX Default Coredump Umask Weakness
- CVE-2002-1786: SGI IRIX 6.5 through 6.5.14 applies a umask of 022 to root core dumps, which allows local users to read the core dumps and possibly obtain sensitive information.
Reported:
Sep 18, 2002
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
Copyright (c) 1994-2008 Internet Security Systems, Inc. All rights reserved worldwide.
For corrections or additions please email xforce@iss.net