From Arijit.Das@med.ge.com Thu Sep 9 21:14:24 2004 Received: with ECARTIS (v1.0.0; list fam); Thu, 09 Sep 2004 21:14:28 -0700 (PDT) Received: from ext-ch1gw-6.online-age.net (ext-ch1gw-6.online-age.net [64.37.194.14]) by oss.sgi.com (8.13.0/8.13.0) with ESMTP id i8A4ENRC007520 for ; Thu, 9 Sep 2004 21:14:24 -0700 Received: from int-ch1gw-3.online-age.net (int-ch1gw-3 [3.159.232.67]) by ext-ch1gw-6.online-age.net (8.12.11/8.12.11/20050527-JWF) with ESMTP id i8A4Cfme010012 for ; Fri, 10 Sep 2004 00:12:41 -0400 Received: from cinmlef03.e2k.ad.ge.com (localhost [127.0.0.1]) by int-ch1gw-3.online-age.net (8.12.9/8.12.3/990426-RLH) with ESMTP id i8A4E88D013977 for ; Fri, 10 Sep 2004 00:14:08 -0400 (EDT) Received: from banmlvem02.e2k.ad.ge.com ([3.159.224.39]) by cinmlef03.e2k.ad.ge.com with Microsoft SMTPSVC(5.0.2195.6673); Fri, 10 Sep 2004 00:13:58 -0400 X-MimeOLE: Produced By Microsoft Exchange V6.0.6562.0 content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Subject: Help Required - FAM vulnerability in Linux Date: Fri, 10 Sep 2004 09:44:28 +0530 Message-ID: <6F832B0C67025649A27362C04369711705C1AC8F@BANMLVEM02.e2k.ad.ge.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Help Required - FAM vulnerability in Linux Thread-Index: AcSW7RYMfaaum6qcSwq4UUywtZTbRA== From: "Das, Arijit \(GE Healthcare\)" To: X-OriginalArrivalTime: 10 Sep 2004 04:13:59.0164 (UTC) FILETIME=[98B4A3C0:01C496EC] Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by oss.sgi.com id i8A4ENRC007520 X-archive-position: 281 X-ecartis-version: Ecartis v1.0.0 Sender: fam-bounce@oss.sgi.com Errors-to: fam-bounce@oss.sgi.com X-original-sender: Arijit.Das@med.ge.com Precedence: bulk X-list: fam Hi, This is regarding the SGI FAM vulnerablility(CVE-1999-0059 ) that has been found by NAI. Question 1: Does this vulnerability also applicable to Linux Systems or it is applicable only to SG IRIX Systems? Question 2: If this vulnerability is applicable to the Linux Systems as well, then please let me know whether there is any fix for this vulnerability of FAM in Linux Systems (Linux Enterprise AS 2.1)? Would be highly thankful if you could spend a minute to answer these queries. Thanks, Arijit From mraymond@sgi.com Thu Sep 16 08:26:44 2004 Received: with ECARTIS (v1.0.0; list fam); Thu, 16 Sep 2004 08:26:50 -0700 (PDT) Received: from omx1.americas.sgi.com (omx1-ext.sgi.com [192.48.179.11]) by oss.sgi.com (8.13.0/8.13.0) with ESMTP id i8GFQiYu007103 for ; Thu, 16 Sep 2004 08:26:44 -0700 Received: from flecktone.americas.sgi.com (flecktone.americas.sgi.com [192.48.203.135]) by omx1.americas.sgi.com (8.12.10/8.12.9/linux-outbound_gateway-1.1) with ESMTP id i8GFQX0f012254 for ; Thu, 16 Sep 2004 10:26:33 -0500 Received: from daisy-e236.americas.sgi.com (daisy-e236.americas.sgi.com [128.162.236.214]) by flecktone.americas.sgi.com (8.12.9/8.12.10/SGI_generic_relay-1.2) with ESMTP id i8GFQNOV47412452; Thu, 16 Sep 2004 10:26:23 -0500 (CDT) Received: from goliath.americas.sgi.com (goliath.americas.sgi.com [128.162.232.85]) by daisy-e236.americas.sgi.com (8.12.9/SGI-server-1.8) with ESMTP id i8GFQMq520353619; Thu, 16 Sep 2004 10:26:23 -0500 (CDT) Received: from goliath.americas.sgi.com by goliath.americas.sgi.com (SGI-8.12.5/SGI-client-1.7) via ESMTP id i8GFQMGD036877; Thu, 16 Sep 2004 10:26:22 -0500 (CDT) Received: (from mraymond@localhost) by goliath.americas.sgi.com (SGI-8.12.5/8.12.5/Submit) id i8GFQLrn036867; Thu, 16 Sep 2004 10:26:21 -0500 (CDT) Date: Thu, 16 Sep 2004 10:26:21 -0500 From: Michael Raymond To: "Das, Arijit (GE Healthcare)" Cc: fam@oss.sgi.com Subject: Re: Help Required - FAM vulnerability in Linux Message-ID: <20040916102620.F36491@goliath.americas.sgi.com> References: <6F832B0C67025649A27362C04369711705C1AC8F@BANMLVEM02.e2k.ad.ge.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <6F832B0C67025649A27362C04369711705C1AC8F@BANMLVEM02.e2k.ad.ge.com>; from Arijit.Das@med.ge.com on Fri, Sep 10, 2004 at 09:44:28AM +0530 X-archive-position: 282 X-ecartis-version: Ecartis v1.0.0 Sender: fam-bounce@oss.sgi.com Errors-to: fam-bounce@oss.sgi.com X-original-sender: mraymond@sgi.com Precedence: bulk X-list: fam It looks like this security issue was raised in 1999. Being 5 years ago I'm pretty sure that it's been fixed by now. Michael On Fri, Sep 10, 2004 at 09:44:28AM +0530, Das, Arijit (GE Healthcare) wrote: > Hi, > > This is regarding the SGI FAM vulnerablility(CVE-1999-0059 ) that has been found by NAI. > > Question 1: Does this vulnerability also applicable to Linux Systems or it is applicable only to SG IRIX Systems? > > Question 2: If this vulnerability is applicable to the Linux Systems as well, then please let me know whether there is any fix for this vulnerability of FAM in Linux Systems (Linux Enterprise AS 2.1)? > > Would be highly thankful if you could spend a minute to answer these queries. > > Thanks, > Arijit > -- Michael A. Raymond Office: (651) 683-3434 Core OS Group Real-Time System Software