Privilege Escalation via Debug Mode in gr_osview on SGI IRIX 6.5.22

CVE-2005-0464 · LOW Severity

AV:L/AC:L/AU:N/C:P/I:N/A:N

gr_osview in SGI IRIX 6.5.22, and possibly other 6.5 versions, does not drop privileges when opening description files while in debug mode, which allows local users to read a line from arbitrary files via the -d and -D options, which prints the line as a formatting error.

Learn more about our User Device Pen Test.