CVE-2000-0578: SGI MIPSPro compilers C, C++, F77 and F90 generate temporary files in /tmp with predictable file names, whi...

Security readout for executives and security teams

SGI's MIPSPro compilers for C, C++, F77, and F90 create temporary work files in the shared /tmp directory using predictable names. On multi-user IRIX systems, another local user could anticipate those names and slip malicious content into a file while someone else's compile is running, potentially tainting the resulting program. The risk is limited to shared systems where untrusted users have shell access. Exposure is confined to legacy SGI IRIX systems running MIPSPro C, C++, F77, or F90 compilers in a shared, multi-user configuration. No modern enterprise footprint is expected. There is no evidence of remote exploitability, and no vendor products or versions are enumerated in the CVE record beyond the general MIPSPro compiler family. Very low priority for modern environments. Only relevant if the business still operates legacy SGI IRIX systems with shared user access; if so, treat as hygiene work during the next maintenance window rather than an urgent incident. No customer-facing or internet-exposed risk is indicated by the cited sources. Mitigation focus: Inventory any surviving SGI IRIX hosts and identify which still run MIPSPro compilers.; Consult SGI/HPE legacy advisories for patched MIPSPro compiler releases addressing predictable tempfiles.; Restrict interactive shell access on affected hosts to trusted users only..

Prepared

Jul 12, 2026, 01:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.