CVE-2000-0579

IRIX crontab creates temporary files with predictable file names and with the umask of the user, which could allow local users to modify another user's crontab file as it is being edited.

CVSS v2.0 3.7 LOW

3.7^/10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:L/AC:H/Au:N/C:P/I:P/A:P

Exploitability : 1.9 / Impact : 6.4

Access Vector LOCAL

Access Complexity HIGH

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.securityfocus.com/bid/1413	Exploit Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-06/0204.html	Exploit Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:sgi:irix:6.3:::::::*
	cpe:2.3:o:sgi:irix:6.5:::::::*

Information

Published : 2000-06-20 21:00

Updated : 2008-09-10 12:05

NVD link : CVE-2000-0579

Mitre link : CVE-2000-0579

JSON object : View

CWE

NVD-CWE-Other

Products Affected

sgi

irix

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.securityfocus.com/bid/1413", "name": "1413", "tags": ["Exploit", "Vendor Advisory"], "refsource": "BID"}, {"url": "http://archives.neohapsis.com/archives/bugtraq/2000-06/0204.html", "name": "20000621 Predictability Problems in IRIX Cron and Compilers", "tags": ["Exploit", "Vendor Advisory"], "refsource": "BUGTRAQ"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "IRIX crontab creates temporary files with predictable file names and with the umask of the user, which could allow local users to modify another user's crontab file as it is being edited."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2000-0579", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 3.7, "accessVector": "LOCAL", "vectorString": "AV:L/AC:H/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "HIGH", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "LOW", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 1.9, "obtainUserPrivilege": true, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2000-06-21T04:00Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2008-09-10T19:05Z"}

3.7 /10