Lucene search
HistorySep 01, 2004 - 4:00 a.m.
CVE-2002-1516
rpcbind
sgi irix
symlink attack
security vulnerability
nvd
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
rpcbind in SGI IRIX, when using the -w command line switch, allows local users to overwrite arbitrary files via a symlink attack.
Affected configurations
Node
sgiirixMatch6.5
ORsgiirixMatch6.5.1
ORsgiirixMatch6.5.2
ORsgiirixMatch6.5.3
ORsgiirixMatch6.5.4
ORsgiirixMatch6.5.5
ORsgiirixMatch6.5.6
ORsgiirixMatch6.5.7
ORsgiirixMatch6.5.8
ORsgiirixMatch6.5.9
ORsgiirixMatch6.5.10
ORsgiirixMatch6.5.11
ORsgiirixMatch6.5.12
ORsgiirixMatch6.5.13
ORsgiirixMatch6.5.13m
ORsgiirixMatch6.5.14
ORsgiirixMatch6.5.14m
ORsgiirixMatch6.5.15
ORsgiirixMatch6.5.15m
ORsgiirixMatch6.5.16
ORsgiirixMatch6.5.16m
ORsgiirixMatch6.5.17
ORsgiirixMatch6.5.17m
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2002-1516