Secunia Logo  
 
SGI ProPack kernel Multiple Vulnerabilities
Secunia Advisory: SA19607
Release Date: 2006-04-11
Popularity: 7,371 views

Critical:
Moderately critical
Impact: Security Bypass
Exposure of sensitive information
Privilege escalation
DoS
Where: From remote
Solution Status: Vendor Patch

OS:SGI Advanced Linux Environment 3

Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2004-0491
CVE-2004-1058
CVE-2004-1068
CVE-2004-1070
CVE-2004-1071
CVE-2004-1072
CVE-2005-0176
CVE-2005-0449
CVE-2005-0749
CVE-2005-1263
CVE-2005-1768
CVE-2005-3275
CVE-2005-3783
CVE-2005-3857
CVE-2006-0742
CVE-2006-1167


Description:
SGI has acknowledged some vulnerabilities in SGI ProPack, which can be exploited by malicious, local users to cause a DoS (Denial of Service), gain knowledge of potentially sensitive information, and gain escalated privileges, and by malicious people to cause a DoS or bypass certain security restrictions.

For more information:
SA13126
SA13232
SA13572
SA14295
SA14713
SA15341
SA15980
SA16494
SA17761
SA17786
SA19078

Solution:
Apply patch 10290 for SGI ProPack3 Service Pack 6.
http://support.sgi.com/

Original Advisory:
ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U.asc

Other References:
SA13126:
http://secunia.com/advisories/13126/

SA13232:
http://secunia.com/advisories/13232/

SA13572:
http://secunia.com/advisories/13572/

SA14295:
http://secunia.com/advisories/14295/

SA14713:
http://secunia.com/advisories/14713/

SA15341:
http://secunia.com/advisories/15341/

SA15980:
http://secunia.com/advisories/15980/

SA16494:
http://secunia.com/advisories/16494/

SA17761:
http://secunia.com/advisories/17761/

SA17786:
http://secunia.com/advisories/17786/

SA19078:
http://secunia.com/advisories/19078/


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. OpenSSL DSA / ECDSA "EVP_VerifyFinal()" Spoofing Vulnerability // 60 views
2. Zeroboard Multiple Vulnerabilities // 46 views
3. Joomla! "X_CMS_LIBRARY_PATH" Directory Traversal Vulnerability // 27 views
4. Symantec Mail Security for SMTP Response Handling Denial of Service // 26 views
5. SAP GUI TabOne ActiveX Control Caption List Buffer Overflow // 25 views
6. Red Hat update for openssl // 24 views
7. vBulletin Personal Sticky Threads Add-on Security Bypass Vulnerability // 23 views
8. Red Hat update for xterm // 22 views
9. Red Hat update for dbus // 22 views
10. BlogHelper "common_db.inc" Information Disclosure Security Issue // 21 views