low2.1Public exploit code
CVE-2002-0875
Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SGI IRIX 6.5.x - FAM Arbitrary Root Owned Directory File Listing2002-08-16 · local · irix · Verified
Impact
Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sgi | Fam | Versions 2.6.6, 2.6.8 |
| Sgi | Irix | Versions 6.5.15, 6.5.16, 6.5.17 |
| Debian | Debian Linux | Version 3.0 |
References
- NVD record
- CVE.org record
- http://www.debian.org/security/2002/dsa-154
- http://www.iss.net/security_center/static/9880.php
- http://www.redhat.com/support/errata/RHSA-2005-005.html
- http://www.securityfocus.com/bid/5487
- http://www.debian.org/security/2002/dsa-154
- http://www.iss.net/security_center/static/9880.php
- http://www.redhat.com/support/errata/RHSA-2005-005.html
- http://www.securityfocus.com/bid/5487