CVE-2005-0464

The CVE concerns SGI IRIX gr_osview (6.5.x, including 6.5.22) which does not drop privileges when opening user-specified description files in debug mode. Local attackers can read a line from arbitrary files by using -d and -D, which prints the line as a formatting error. The core issue is an info...