SGI Information for VU#153653
Linux dump uses environment variables insecurely, allowing for root compromise
- Vendor Information Help Date Notified: 16 Jul 2001
- Statement Date:
- Date Updated: 16 Jul 2001
None of the EFS and XFS dump/restore tools in IRIX are setuid root per an SGI engineer, so we believe IRIX is not vulnerable unless proven otherwise.
The vendor has not provided us with any further information regarding this vulnerability.
The CERT/CC has no additional comments at this time.
If you have feedback, comments, or additional information about this vulnerability, please send us email.