CVE-2002-0358 - MediaMail and MediaMail Pro in SGI IRIX 6.5.16 and earlier allows local users to force the program t

CVE-2002-0358

Summary

MediaMail and MediaMail Pro in SGI IRIX 6.5.16 and earlier allows local users to force the program to dump core via certain arguments, which could allow the users to read sensitive data or gain privileges.

References

ftp://patches.sgi.com/support/free/security/advisories/20020602-01-I
http://www.iss.net/security_center/static/9292.php
http://www.securityfocus.com/bid/4959

Vulnerable Configurations

cpe:2.3:a:sgi:mediamail:*:*:*:*:*:*:*:*
cpe:2.3:a:sgi:mediamail:*:*:*:*:*:*:*:*
cpe:2.3:a:sgi:mediamail:*:*:pro:*:*:*:*:*
cpe:2.3:a:sgi:mediamail:*:*:pro:*:*:*:*:*

CVSS

Base:	4.6 (as of 05-09-2008 - 20:27)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:L/AC:L/Au:N/C:P/I:P/A:P

refmap via4

bid	4959
sgi	20020602-01-I
xf	irix-mediamail-core-dump(9292)

Last major update

05-09-2008 - 20:27

Published

26-07-2002 - 04:00

Last modified

05-09-2008 - 20:27