Vulnerability Name:

CVE-1999-1485 (CCN-2246)

Assigned:1999-05-31
Published:1999-05-31
Updated:2017-12-19
Summary:nsd in IRIX 6.5 through 6.5.2 exports a virtual filesystem on a UDP port, which allows remote attackers to view files and cause a possible denial of service by mounting the nsd virtual file system.
CVSS v3 Severity:6.5 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): None
Availibility (A): Low
CVSS v2 Severity:6.4 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): None
Availibility (A): Partial
6.4 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): None
Availibility (A): Partial
Vulnerability Type:CWE-Other
Vulnerability Consequences:Obtain Information
References:Source: MITRE
Type: CNA
CVE-1999-1485

Source: BUGTRAQ
Type: UNKNOWN
19990531 IRIX 6.5 nsd virtual filesystem vulnerability

Source: CCN
Type: BugTraq Mailing List, 1999-05-31 7:56:37
IRIX 6.5 nsd virtual filesystem vulnerability

Source: OSVDB
Type: UNKNOWN
8564

Source: CCN
Type: OSVDB ID: 8564
IRIX nsd UDP Port Virtual Filesystem Information Disclosure

Source: BID
Type: UNKNOWN
412

Source: CCN
Type: BID-412
IRIX nsd Vulnerability

Source: CCN
Type: SGI Web site
IRIX 6.5.3 released

Source: XF
Type: UNKNOWN
sgi-nsd-view(2246)

Source: XF
Type: UNKNOWN
sgi-nsd-view(2246)

Source: XF
Type: UNKNOWN
sgi-nsd-create(2247)

Vulnerable Configuration:Configuration 1:
  • cpe:/o:sgi:irix:6.5:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.1:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.2:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/o:sgi:irix:6.5:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.1:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.2:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Vulnerability Name:

    CVE-1999-1485 (CCN-2247)

    Assigned:1999-05-31
    Published:1999-05-31
    Updated:2017-12-19
    Summary:nsd in IRIX 6.5 through 6.5.2 exports a virtual filesystem on a UDP port, which allows remote attackers to view files and cause a possible denial of service by mounting the nsd virtual file system.
    CVSS v3 Severity:6.5 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L)
    Exploitability Metrics:Attack Vector (AV): Network
    Attack Complexity (AC): Low
    Privileges Required (PR): None
    User Interaction (UI): None
    Scope:Scope (S): Unchanged
    Impact Metrics:Confidentiality (C): None
    Integrity (I): Low
    Availibility (A): Low
    CVSS v2 Severity:6.4 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P)
    Exploitability Metrics:Access Vector (AV): Network
    Access Complexity (AC): Low
    Authentication (Au): None
    Impact Metrics:Confidentiality (C): Partial
    Integrity (I): None
    Availibility (A): Partial
    6.4 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P)
    Exploitability Metrics:Access Vector (AV): Network
    Access Complexity (AC): Low
    Athentication (Au): None
    Impact Metrics:Confidentiality (C): None
    Integrity (I): Partial
    Availibility (A): Partial
    Vulnerability Type:CWE-Other
    Vulnerability Consequences:File Manipulation
    References:Source: MITRE
    Type: CNA
    CVE-1999-1485

    Source: CCN
    Type: BugTraq Mailing List, 1999-05-31 7:56:37
    IRIX 6.5 nsd virtual filesystem vulnerability

    Source: CCN
    Type: OSVDB ID: 8564
    IRIX nsd UDP Port Virtual Filesystem Information Disclosure

    Source: CCN
    Type: BID-412
    IRIX nsd Vulnerability

    Source: CCN
    Type: SGI Web site
    IRIX 6.5.3 released

    Source: XF
    Type: UNKNOWN
    sgi-nsd-create(2247)

    Vulnerable Configuration:Configuration CCN 1:
  • cpe:/o:sgi:irix:6.5:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.1:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.2:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    sgi irix 6.5
    sgi irix 6.5.1
    sgi irix 6.5.2
    sgi irix 6.5
    sgi irix 6.5.1
    sgi irix 6.5.2
    sgi irix 6.5
    sgi irix 6.5.1
    sgi irix 6.5.2