SGI Tempo System Database Exposure
It is possible for users of ICE-X supercomputers to gain access to backups of system configuration databases.
The impact depends on the type of information held within this database. More recent versions of Tempo store root password hashes in the database, while in earlier versions of Tempo the impact is believed to me more limited.
Insecure (world readable) file permissions are set on the database backup.
SGI have chosen not to co-operate on resolving this issue. However, a workaround is possible:
- Alter the permissions on any current database dumps (this should be run/checked on all service nodes)
# chmod 600 /etc/dbdump.db
- Within the file /etc/opt/sgi/conf.d/80-update-mysql find the following section of code:
command = “mysqldump --user=root --pass=" + password + " --all-databases --master-data > /etc/dbdump.db”
- Alter this to the following, in order to ensure the more secure permissions persist reboots:
command = “mysqldump --user=root --pass=" + password + " --all-databases --master-data > /etc/dbdump.db; chmod 600 /etc/dbdump.db”
SGI have chosen not to cooperate with MWR in the co-ordinated disclosure of this and other SGI related security issues. MWR are therefore unable to provide specific version information and other details surrounding this issue. Whilst every effort has been made to ensure the accuracy and usefulness of this advisory it is recommend that SGI are contacted directly if further information is required.