936 matches found
CVE-2005-0139
Unknown vulnerability in rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not sufficiently restrict access rights for read-mostly exports, which allows attackers to conduct unauthorized activities...
CVE-2005-0138
rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not correctly allow access to anonymous clients that connect from a system whose hostname can not be determined. NOTE: while this issue occurs in a security mechanism, there is no apparent attacker role and probably does not satisfy the CVE...
CVE-2005-0138
CVE-2005-0138 affects SGI IRIX 6.5.25–6.5.27 where rpc.mountd does not correctly handle anonymous clients from hosts with undetermined hostnames. The public records describe this as a security-mechanism issue and note there is no clear attacker role, with the CVE possibly not meeting the vulnerab...
CVE-2005-0139
CVE-2005-0139 affects SGI IRIX 6.5.25/6.5.26/6.5.27 via rpc.mountd, where read-mostly exports do not have proper access restrictions. The issue is described as an unknown vulnerability allowing unauthorized activities; CVSS details from NVD indicate network access, low complexity, no authenticati...
CVE-2005-0139
Unknown vulnerability in rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not sufficiently restrict access rights for read-mostly exports, which allows attackers to conduct unauthorized activities...
CVE-2002-2093
The Video Control Panel on SGI O2/IRIX 6.5, when the Default Input is set to "Output Video", allows attackers to access a console session by running videoout then videoin...
CVE-2002-2093
The CVE-2002-2093 entry concerns SGI O2/IRIX 6.5, where the Video Control Panel can permit a user to gain a console session when the Default Input is set to “Output Video.” Attacks involve running videoout followed by videoin to access a console. The available documents confirm the affected produ...
CVE-2002-1786
SGI IRIX 6.5 through 6.5.14 applies a umask of 022 to root core dumps, which allows local users to read the core dumps and possibly obtain sensitive information...
CVE-2002-1791
SGI IRIX 6.5 through 6.5.17 creates temporary desktop files with world-writable permissions, which allows local users to overwrite or corrupt those files...
CVE-2002-1786
SGI IRIX 6.5–6.5.14 is affected. The issue is that root core dumps receive a umask of 022, allowing local users to read core dumps and possibly obtain sensitive information. Impact: partial confidentiality of dumped data. Affected component: core dump handling on IRIX; root-owned dumps. Root caus...
CVE-2002-1791
CVE-2002-1791 affects SGI IRIX 6.5–6.5.17. The vulnerability stems from creating temporary desktop files with world-writable permissions, enabling local users to overwrite or corrupt those files. Exploitation details, affected files, and patch information are not provided in the documents. Public...
CVE-2002-1787
Buffer overflow in uux in eoe.sw.uucp package of SGI IRIX 6.5 through 6.5.17 allows local users to execute arbitrary code via unknown attack vectors...
CVE-2002-1787
CVE-2002-1787 affects SGI IRIX 6.5–6.5.17; the vulnerability is a buffer overflow in the uux component of the eoe.sw.uucp package. The underlying root cause is improper handling of input causing a overflow, enabling local users to execute arbitrary code. References point to SGI advisories and pat...
[SA15785] SGI IRIX arrayd Authentication Spoofing Vulnerability
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
SGI Irix arrayd authentication spoofing
No description provided...
SGI Irix rpc.mountd privilege escalation
Under some conditions write access is possible to read only exports...
[SA15619] SGI IRIX rpc.mountd "read-mostly" Exports Read/Write Access
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
CVE-2004-1891
The ftpsyslog function in ftpd in SGI IRIX 6.5.20 "doesn't work with anonymous FTP," which has an unknown impact, possibly preventing the actions of anonymous users from being logged...
CVE-2004-2002
Technical details for CVE-2004-2002 are not publicly available in the provided documents; no information on affected products, versions, root cause, or fix is present. Monitor for updates.