Info

Disclosure

May 17, 2004

Discovery

Unknown

Dates

Exploit

May 17, 2004

Solution

Unknown

Description

IRIX rpc.mountd contains a flaw that may allow a remote denial of service. The issue is triggered when the rpc.mountd daemon processes a specially crafted RPC request, and will result in loss of availability for the service.

Classification

Location: Local Access Required, Remote / Network Access
Attack Type: Denial of Service
Impact: Loss of Availability
Exploit: Exploit Public
Disclosure: OSVDB Verified

Solution

Upgrade to version 6.5.25 or higher, as it has been reported to fix this vulnerability. It is also possible to correct the flaw by implementing the following workaround(s): Apply patch # 5602 released by SGI.

Products

Silicon Graphics, Inc.

IRIX

6.5.24

References

Security Tracker: 1010185
Secunia Advisory ID: 11628
ISS X-Force ID: 16175
CVE ID: 2004-0483 (see also: NVD)
Vendor Specific Advisory URL: ftp://patches.sgi.com/support/free/security/advisories/20040503-01-P.asc
Mail List Post: http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0889.html
Vendor URL: http://www.sgi.com/
Keyword: SGI BUG 914056

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/6201