Vulnerability Report

CVE-2005-0464

Title: SGI IRIX gr_osview arbitrary file read

Information Disclosure

Proof Of Concept

PoC Available for CVE-2005-0464

CWE Category NVD-CWE-noinfo

Published Date May 02, 2005

Modified Date Apr 03, 2025

Exploit Status Available

Score 2.1 CVSS v2.0

Exploit Probability (EPSS)

0.60%

Vulnerability Summary

CVE-2005-0464: gr_osview in SGI IRIX 6.5.22, and possibly other 6.5 versions, does not drop privileges when opening description files while in debug mode, which allows local users to read a line from arbitrary files via the -d and -D options, which prints the line as a formatting error.

Impacted Vendors

sgi 1

Reference Links

ftp://patches.sgi.com/support/free/security/advisories/20050402-01-P http://secunia.com/advisories/14875 http://securitytracker.com/id?1013662 http://www.idefense.com/application/poi/display?id=226&type=vulnerabilities http://www.osvdb.org/15351 ftp://patches.sgi.com/support/free/security/advisories/20050402-01-P http://secunia.com/advisories/14875 http://securitytracker.com/id?1013662 http://www.idefense.com/application/poi/display?id=226&type=vulnerabilities http://www.osvdb.org/15351

CVSS v2.0

Source Entity [email protected]

Severity LOW

2.1

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:L/AC:L/Au:N/C:P/I:N/A:N

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2005-0464 Exploits & PoCs (Proof Of Concept)

Exploit-DB https://www.exploit-db.com/exploits/25361

View Code

April 03, 2025 MODIFIED

Vulnerability data or affected products updated.

May 02, 2005 PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A

Complexity N/A

Privileges N/A

Interaction NONE

CVSS Vector String


                                    AV:L/AC:L/Au:N/C:P/I:N/A:N

Affected Stack

No specific products linked.