Secunia

Three vulnerabilities have been discovered in IRIX, which can be exploited by malicious, local users to gain escalated privileges or cause a DoS (Denial of Service).

1) Under certain circumstances, the "syssgi()" system call can be exploited to read and write kernel memory via "SGI_IOPROBE" requests. Successful exploitation grants root privileges on a vulnerable system.

2) An unspecified error within the "mapelf32exec()" function can be exploited to crash the system via a malformed binary.

3) Some unspecified page invalidation issues may cause init to panic.

The vulnerabilities have been reported in versions 6.5.20 through 6.5.24. Prior versions may also be affected.

Solution
See original advisory for available patches.

Provided and/or discovered by
1) Adam Gowdiak
2+3) Reported by vendor.

Changelog
Further details available in Customer Area

Original Advisory
ftp://patches.sgi.com/support/free/security/advisories/20040601-02-P.asc

Deep Links
Links available in Customer Area