Lucene search

[email protected]CVE-2002-1517

HistorySep 01, 2004 - 4:00 a.m.

CVE-2002-1517

2004-09-0104:00:00

[email protected]

web.nvd.nist.gov

fsr_efs

irix 6.5

unauthorized file activities

symlink attack

cve-2002-1517

nvd

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

fsr_efs in IRIX 6.5 allows local users to conduct unauthorized file activities via a symlink attack, possibly via the .fsrlast file.

Affected configurations

NVD

Node

sgifreewareMatch1.0

sgiirixMatch6.5

sgiirixMatch6.5.1

sgiirixMatch6.5.2

sgiirixMatch6.5.3

sgiirixMatch6.5.4

sgiirixMatch6.5.5

sgiirixMatch6.5.6

sgiirixMatch6.5.7

sgiirixMatch6.5.8

sgiirixMatch6.5.9

sgiirixMatch6.5.10

sgiirixMatch6.5.11

sgiirixMatch6.5.12

sgiirixMatch6.5.13

sgiirixMatch6.5.13m

sgiirixMatch6.5.14

sgiirixMatch6.5.14m

sgiirixMatch6.5.15

sgiirixMatch6.5.15m

sgiirixMatch6.5.16

sgiirixMatch6.5.16m

sgiirixMatch6.5.17

sgiirixMatch6.5.17m

CPENameOperatorVersion
sgi:freewaresgi freewareeq1.0
sgi:irixsgi irixeq6.5
sgi:irixsgi irixeq6.5.1
sgi:irixsgi irixeq6.5.2
sgi:irixsgi irixeq6.5.3
sgi:irixsgi irixeq6.5.4
sgi:irixsgi irixeq6.5.5
sgi:irixsgi irixeq6.5.6
sgi:irixsgi irixeq6.5.7
sgi:irixsgi irixeq6.5.8

CPE	Name	Operator	Version
sgi:freeware	sgi freeware	eq	1.0
sgi:irix	sgi irix	eq	6.5
sgi:irix	sgi irix	eq	6.5.1
sgi:irix	sgi irix	eq	6.5.2
sgi:irix	sgi irix	eq	6.5.3
sgi:irix	sgi irix	eq	6.5.4
sgi:irix	sgi irix	eq	6.5.5
sgi:irix	sgi irix	eq	6.5.6
sgi:irix	sgi irix	eq	6.5.7
sgi:irix	sgi irix	eq	6.5.8

Rows per page:

1-10 of 241

References

ftp://patches.sgi.com/support/free/security/advisories/20020903-01-P

ftp://patches.sgi.com/support/free/security/advisories/20020903-02-P

ftp://patches.sgi.com/support/free/security/advisories/20021103-01-P

ftp://patches.sgi.com/support/free/security/advisories/20021103-02-P

www.ciac.org/ciac/bulletins/n-004.shtml

www.iss.net/security_center/static/10275.php

www.osvdb.org/8579

www.securityfocus.com/bid/5897

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2002-1517

nvd1 cvelist1