Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SGI MIPSPro compilers C, C++, F77 and F90 generate temporary files in /tmp with predictable file names, which could allow local users to insert malicious contents into these files as they are being compiled by another user.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IRIX MIPSPro Compiler /tmp文件名可预测漏洞
Vulnerability Description
IRIX是一款由SGI公司开发和维护的商业性质UNIX操作系统。 IRIX包含的MIPSpro编译器不正确建立临时文件，本地攻击者可以利用这个漏洞利用符号链接破坏任意文件。 MIPSPro 7.2.1分发版本的C、C++、F77等F90主要编译器，都会在/tmp目录下建立可预测文件名的文件，其权限为运行编译器的用户umask确定，本地攻击者可以通过猜测文件名，利用符号链接，以其他用户权限破坏系统任意文件，或者执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A