CVE-2000-0578

Current Description

SGI MIPSPro compilers C, C++, F77 and F90 generate temporary files in /tmp with predictable file names, which could allow local users to insert malicious contents into these files as they are being compiled by another user.

Basic Data

PublishedJune 21, 2000
Last ModifiedSeptember 10, 2008
Assignercve@mitre.org
Data TypeCVE
Data FormatMITRE
Data Version4.0
Problem TypeNVD-CWE-Other
CVE Data Version4.0

Base Metric V2

CVSS 2 - Version2.0
CVSS 2 - Vector StringAV:L/AC:H/Au:N/C:P/I:P/A:P
CVSS 2 - Access VectorLOCAL
CVSS 2 - Access ComplexityHIGH
CVSS 2 - AuthenticationNONE
CVSS 2 - Confidentiality ImpactPARTIAL
CVSS 2 - Availability ImpactPARTIAL
CVSS 2 - Base Score3.7
SeverityLOW
Exploitability Score1.9
Impact Score6.4
Obtain All Privilegefalse
Obtain User Privilegetrue
Obtain Other Privilegefalse

Base Metric V3

No data provided.

Configurations

  • OR - Configuration 1
    Cpe VersionPartVendorProductVersionUpdateEditionLanguageSW EditionTarget SWTarget HWOtherVersion Start IncludingVersion End IncludingVersion Start ExcludingVersion End Excluding
    2.3ApplicationSgiMipspro Compilers7.1*******
    2.3ApplicationSgiMipspro Compilers7.2.1*******

Vulnerable Software List

VendorProductVersions
Sgi Mipspro Compilers 7.1, 7.2.1

References

NameSourceURLTags
20000621 Predictability Problems in IRIX Cron and Compilershttp://archives.neohapsis.com/archives/bugtraq/2000-06/0204.htmlBUGTRAQExploit Vendor Advisory
1412http://www.securityfocus.com/bid/1412BIDExploit Vendor Advisory