CVE-2002-0213 Path traversal in n/a

What is CVE-2002-0213?

CVE-2002-0213 is a low-severity path traversal vulnerability in Sgi Irix, published on 2 Apr 2003. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

xkas in Xinet K-AShare 0.011.01 for IRIX allows local users to read arbitrary files via a symlink attack on the VOLICON file, which is copied to the .HSicon file in a shared directory.

Which versions are affected by CVE-2002-0213?

It affects 2 products.

Products include Sgi Irix, Xinet K-Ashare.

How do I fix CVE-2002-0213?

No fix has been published for CVE-2002-0213 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2002-0213 being exploited?

There is no known exploitation of CVE-2002-0213 in the wild and no public exploit code.

Other vulnerabilities in Sgi Irix

• CVE-2002-1584 Privilege escalation in n/a Critical 10.0
• CVE-2004-0139 Other in n/a Critical 10.0
• CVE-2003-0575 Memory corruption in n/a Critical 10.0
• CVE-2003-0473 Privilege escalation in n/a Critical 10.0
• CVE-2002-0359 Auth bypass in n/a Critical 10.0

All Sgi Irix vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-mfh7-p4p6-hhhc.