vendor:
SGI Irix
by:
LAST STAGE OF DELIRIUM
9.8
CVSS
CRITICAL
Remote Code Execution
264
CWE
Product Name: SGI Irix
Affected Version From: All versions of Irix with SGI Array Services installed
Affected Version To:
Patch Exists: NO
Related CWE: CVE-1999-0642
CPE: o:sgi:irix
Platforms Tested: SGI Irix
1999
SGI Array Services Remote Root Compromise
The SGI Array Services daemon (arrayd) in Irix systems is vulnerable to remote root compromises. The default configuration for authorization allows requests from anywhere to be accepted, leading to remote code execution with root privileges. An attacker can exploit this vulnerability by sending a specially crafted request to the arrayd service.
Mitigation:
SGI recommends enabling simple authentication for arrayd clusters to mitigate this vulnerability. Additionally, applying the necessary patches for the affected systems is advised.
