Vulnerability in Sgi Irix

CVE-2005-0464

gr_osview in SGI IRIX 6.5.22, and possibly other 6.5 versions, does not drop privileges when opening description files while in debug mode, which allows local users to read a line from arbitrary files via the -d and -D options, which prints the line as a formatting error.

EPSS: 0.007 (48.9th percentile) — read the EPSS interpretation.

Affected products

  • Sgi Irix — versions 6.5.22
  • N/a — versions n/a

References