SGI IRIX PIOCSWATCH ioctl() denial of service

irix-piocswatch-ioctl-dos (12241) The risk level is classified as MediumMedium Risk

Description:

SGI IRIX is vulnerable to a denial of service. A non-privileged local attacker could call the PIOCSWATCH ioctl() function to cause a kernel panic, which would cause the system to crash.


Consequences:

Denial of Service

Remedy:

Upgrade to the latest version of IRIX ( 6.5.21 or later), when it becomes available, as listed in SGI Security Advisory 20030603-01-P. See References.

— OR —

Apply the appropriate patch for your system, as listed in SGI Security Advisory 20030603-01-P. See References.

References:

  • SGI Security Advisory 20030603-01-P: Potential Denial of Service using PIOCSWATCH ioctl.
  • BID-7868: SGI IRIX PIOCSWATCH Local Denial Of Service Vulnerability
  • CVE-2003-0175: SGI IRIX before 6.5.21 allows local users to cause a denial of service (kernel panic) via a certain call to the PIOCSWATCH ioctl.
  • OSVDB ID: 8582: IRIX PIOCSWATCH ioctl Local DoS
  • SECTRACK ID: 1008770: SGI IRIX PIOCSWATCH ioctl() Lets Local Users Crash the Kernel
  • US-CERT VU#142228: SGI IRIX vulnerable to DoS when user space program calls the PIOCSWATCH ioctl() function

Platforms Affected:

  • SGI IRIX 6.5
  • SGI IRIX 6.5.1
  • SGI IRIX 6.5.10
  • SGI IRIX 6.5.10f
  • SGI IRIX 6.5.10m
  • SGI IRIX 6.5.11
  • SGI IRIX 6.5.11f
  • SGI IRIX 6.5.11m
  • SGI IRIX 6.5.12
  • SGI IRIX 6.5.12f
  • SGI IRIX 6.5.12m
  • SGI IRIX 6.5.13
  • SGI IRIX 6.5.13f
  • SGI IRIX 6.5.13m
  • SGI IRIX 6.5.14
  • SGI IRIX 6.5.14f
  • SGI IRIX 6.5.14m
  • SGI IRIX 6.5.15
  • SGI IRIX 6.5.15f
  • SGI IRIX 6.5.15m
  • SGI IRIX 6.5.16
  • SGI IRIX 6.5.16f
  • SGI IRIX 6.5.16m
  • SGI IRIX 6.5.17
  • SGI IRIX 6.5.17f
  • SGI IRIX 6.5.17m
  • SGI IRIX 6.5.18
  • SGI IRIX 6.5.18f
  • SGI IRIX 6.5.18m
  • SGI IRIX 6.5.19
  • SGI IRIX 6.5.19f
  • SGI IRIX 6.5.19m
  • SGI IRIX 6.5.2
  • SGI IRIX 6.5.20
  • SGI IRIX 6.5.20f
  • SGI IRIX 6.5.20m
  • SGI IRIX 6.5.2f
  • SGI IRIX 6.5.2m
  • SGI IRIX 6.5.3
  • SGI IRIX 6.5.3f
  • SGI IRIX 6.5.3m
  • SGI IRIX 6.5.4
  • SGI IRIX 6.5.4f
  • SGI IRIX 6.5.4m
  • SGI IRIX 6.5.5
  • SGI IRIX 6.5.5f
  • SGI IRIX 6.5.5m
  • SGI IRIX 6.5.6
  • SGI IRIX 6.5.6f
  • SGI IRIX 6.5.6m
  • SGI IRIX 6.5.7
  • SGI IRIX 6.5.7f
  • SGI IRIX 6.5.7m
  • SGI IRIX 6.5.8
  • SGI IRIX 6.5.8f
  • SGI IRIX 6.5.8m
  • SGI IRIX 6.5.9
  • SGI IRIX 6.5.9f
  • SGI IRIX 6.5.9m

Reported:

Jun 10, 2003

The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.

For corrections or additions please email ignore thisxforceignore this@ignore thisus.ignore thisibm.comignore this

Return to the main page