IRIX 6.2/6.3/6.4 - xfs truncate() Privilege Check

/ source: https://www.securityfocus.com/bid/1540/info The truncate system call on a number of versions of the IRIX operating system with the xfs file system does not properly check permissions before truncating a file, making it possible for unprivileged users to damage files to which they would...

CVE-1999-0049

Csetup under IRIX allows arbitrary file creation or overwriting...

PT-1997-1029 · Sgi · Csetup

Name of the Vulnerable Software and Affected Versions: Csetup under IRIX affected versions not specified Description: The issue allows for arbitrary file creation or overwriting. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerabili...

CVE-1999-0051

Arbitrary file creation and program execution using FLEXlm LicenseManager, from versions 4.0 to 5.0, in IRIX...

PT-1997-1030 · Globetrotter +1 · Flexlm Licensemanager +1

Name of the Vulnerable Software and Affected Versions: IRIX versions 4.0 through 5.0 Description: The issue allows for arbitrary file creation and program execution using FLEXlm LicenseManager. Recommendations: For IRIX versions 4.0 through 5.0, consider disabling the FLEXlm LicenseManager until ...

CVE-1999-1120

netprint in SGI IRIX 6.4 and earlier trusts the PATH environmental variable for finding and executing the disable program, which allows local users to gain privileges...

SGI IRIX 6.4 - netprint Local Privilege Escalation

SGI IRIX 6.4 - netprint Local Privilege Escalation source: https://www.securityfocus.com/bid/395/info A vulnerability exists in the netprint program, shipping with Irix 6.x and 5.x by Silicon Graphics. The netprint program calls the "disable" command via a system call, without specifying an...

SGI IRIX 6.4 - 'netprint' Local Privilege Escalation

source: https://www.securityfocus.com/bid/395/info A vulnerability exists in the netprint program, shipping with Irix 6.x and 5.x by Silicon Graphics. The netprint program calls the "disable" command via a system call, without specifying an explicit path. Therefore, any program in the path named...

IRIX 6.5.x - usrsbingr_osview Local Buffer Overflow

IRIX 6.5.x - usrsbingrosview Local Buffer Overflow / source: https://www.securityfocus.com/bid/1526/info Under certain versions of IRIX, the 'grosview' command contains a buffer overflow that local attackers can exploit to gain root privileges. The grosview command produces a graphical display of...

SGI IRIX 6.4 - datmancdman Local Privilege Escalation

SGI IRIX 6.4 - datmancdman Local Privilege Escalation source: https://www.securityfocus.com/bid/347/info A vulnerability exists in the datman/cdman program, as included with Irix 6.2 and 5.3 from Silicon Graphics Inc. The vulnerability would allow arbitrary users to execute commands as root. The...

SGI IRIX 6.4 - 'datman'/'cdman' Local Privilege Escalation

source: https://www.securityfocus.com/bid/347/info A vulnerability exists in the datman/cdman program, as included with Irix 6.2 and 5.3 from Silicon Graphics Inc. The vulnerability would allow arbitrary users to execute commands as root. The datman/cdman program will search for the existance of ...

CVE-1999-1401

Vulnerability in Desktop searchbook program in IRIX 5.0.x through 6.2 sets insecure permissions for certain user files iconbook and searchbook...

BSD/OS 2.1 / DG/UX 4.0 / Debian 0.93 / Digital UNIX 4.0 B / FreeBSD 2.1.5 / HP-UX 10.34 / IBM AIX 4.1.5 / NetBSD 1.0/1.1 / NeXTstep 4.0 / SGI IRIX 6.3 / SunOS 4.1.4 - 'rlogin' Local Privilege Escalation

/ source: https://www.securityfocus.com/bid/242/info The SUID rlogin program is used to establish remote sessions. A buffer overflow condition has been found in the rlogin program that may allow an unauthorized user to gain root access. The overflow in particular is in the rlogin code that handle...

CVE-1999-0044

fsdump command in IRIX allows local users to obtain root access by modifying sensitive files...

SGI IRIX 6.2 - fsdump Local Privilege Escalation

SGI IRIX 6.2 - fsdump Local Privilege Escalation source: https://www.securityfocus.com/bid/355/info A number of vulnerabilities exist in the fsdump program included with Silicon Graphics Inc's IRIX operating system. Each of these holes can be used to obtain root privlilege. Variant 1: irix%...

SGI IRIX 6.2 - 'fsdump' Local Privilege Escalation

source: https://www.securityfocus.com/bid/355/info A number of vulnerabilities exist in the fsdump program included with Silicon Graphics Inc's IRIX operating system. Each of these holes can be used to obtain root privlilege. Variant 1: irix% /var/rfindd/fsdump -L/etc/passwd -F/tmp/dump / count t...

SGI IRIX 6.4 - suid_exec Local Privilege Escalation

SGI IRIX 6.4 - suidexec Local Privilege Escalation source: https://www.securityfocus.com/bid/467/info A vulnerability exists in the 'suidexec' utility, as shipped by SGI with it's Irix operating system, versions 5.x and 6.x. Suidexec is part of the Korn shell package, and was originally the...

SGI IRIX 5.15.2 - sgihelp Local Privilege Escalation

SGI IRIX 5.15.2 - sgihelp Local Privilege Escalation source: https://www.securityfocus.com/bid/468/info The sgihelp program, from SGI and included with IRIX 5.1 and 5.2, contains a vulnerability. sgihelp contains an option that allows a user to print to a command. Certain SGI utilities, including...

SGI IRIX 6.4 - 'suid_exec' Local Privilege Escalation

source: https://www.securityfocus.com/bid/467/info A vulnerability exists in the 'suidexec' utility, as shipped by SGI with it's Irix operating system, versions 5.x and 6.x. Suidexec is part of the Korn shell package, and was originally the mechanism by which ksh executed setuid shell scripts...

SGI IRIX 5.1/5.2 - 'sgihelp' Local Privilege Escalation

source: https://www.securityfocus.com/bid/468/info The sgihelp program, from SGI and included with IRIX 5.1 and 5.2, contains a vulnerability. sgihelp contains an option that allows a user to print to a command. Certain SGI utilities, including PrintStatus, printers, scanners, and a number of...