Login Request a demo
Unscored severity · published Dec 27, 2002
CVE-2002-1584
Unknown vulnerability in the AUTH_DES authentication for RPC in Solaris 2.5.1, 2.6, and 7, SGI IRIX 6.5 to 6.5.19f, and possibly other platforms, allows remote attackers to gain…
–
CVSS
5.7%
EPSS
No
On KEV
Description
Unknown vulnerability in the AUTH_DES authentication for RPC in Solaris 2.5.1, 2.6, and 7, SGI IRIX 6.5 to 6.5.19f, and possibly other platforms, allows remote attackers to gain privileges.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.7% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IR
Irix · Sgi
6.5.1; 6.5.2; 6.5.2f; 6.5.2m; 6.5.3; 6.5.3f; +34 more · source: NVD
SO
Solaris · Sun
2.5.1; 2.6; 7.0 · source: NVD
SU
Sunos · Sun
5.5.1; 5.7 · source: NVD
Affected product
IR
Irix
Sgi
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1584
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1584
secunia.com
http://secunia.com/advisories/7899/
sunsolve.sun.com
http://sunsolve.sun.com/search/document.do?assetkey=1-26-46944-1
US Government Resource
http://www.kb.cert.org/vuls/id/518057
www.securityfocus.com
http://www.securityfocus.com/bid/6484
www.securitytracker.com
http://www.securitytracker.com/id?1005934
More from Irix
9.8
CVE-2003-0174
The LDAP name service (nsd) in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been provided by an LDAP server, which could allow attackers to…
9.8
CVE-2001-0249
Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which uses glob to…
9.8
CVE-2001-0248
Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to…
8.4
CVE-1999-0029
root privileges via buffer overflow in ordist command on SGI IRIX systems
8.4
CVE-1999-0036
IRIX login program with a nonzero LOCKOUT parameter allows creation or damage to files