936 matches found
CVE-2000-0797
Buffer overflow in grosview in IRIX 6.2 and 6.3 allows local users to gain privileges via a long -D option...
CVE-2002-1516
The CVE-2002-1516 entry concerns rpcbind on SGI IRIX. When running rpcbind with the -w command line switch, a symlink-attack vulnerability could allow a local user to overwrite arbitrary files. Root cause: improper handling of symlinks by rpcbind under -w. Impact: local user could modify files, p...
CVE-2002-1419
The CVE concerns IRIX on SGI Origin 3000. Upgrading Origin 3000 to IRIX versions 6.5.13–6.5.16 changes the system MAC address, which could bypass or modify access restrictions based on MAC addresses. Affected environment: IRIX on Origin 3000 with those 6.5.x levels. Vulnerability impact: changes ...
CVE-2002-1516
rpcbind in SGI IRIX, when using the -w command line switch, allows local users to overwrite arbitrary files via a symlink attack...
CVE-2002-1419
The upgrade of IRIX on Origin 3000 to 6.5.13 through 6.5.16 changes the MAC address of the system, which could modify intended access restrictions that are based on a MAC address...
CVE-2002-1517
fsrefs in IRIX 6.5 allows local users to conduct unauthorized file activities via a symlink attack, possibly via the .fsrlast file...
CVE-2002-1517
The vulnerability CVE-2002-1517 affects IRIX 6.5: the fsr_efs component allows local users to perform unauthorized file activities via a symlink attack, possibly involving the .fsrlast file. The affected component is fsr_efs in IRIX 6.5, with a local attack vector and partial impacts to confident...
CVE-2000-0797
CVE-2000-0797 describes a buffer overflow in IRIX’s gr_osview on IRIX 6.2/6.3 that allows local users to gain privileges via an excessively long -D option. The vulnerability is due to improper handling of long command-line arguments in gr_osview, enabling privilege escalation. Public references s...
CVE-2001-0485
Unknown vulnerability in netprint in IRIX 6.2, and possibly other versions, allows local users with lp privileges attacker to execute arbitrary commands via the -n option...
CVE-2001-0485
The CVE concerns SGI IRIX netprint: a local-privilege escalation in /usr/lib/print/netprint (IRIX 6.2 and potentially other versions) that allows a local user with lp privileges to run arbitrary commands via the -n option. The SGI advisory documents confirmed affected installations and provides r...
CVE-2004-0134
cpr libcpr in SGI IRIX before 6.5.25 allows local users to gain privileges by loading a user provided library while restarting the checkpointed process...
CVE-2004-0136
The mapelf32exec function call in IRIX 6.5.20 through 6.5.24 allows local users to cause a denial of service system crash via a "corrupted binary."...
CVE-2004-0137
Unknown vulnerability in init for IRIX 6.5.20 through 6.5.24 allows local users to cause a denial of service system panic as a result of "page invalidation issues."...
CVE-2004-0135
The syssgi SGIIOPROBE system call in IRIX 6.5.20 through 6.5.24 allows local users to gain privileges by reading and writing to kernel memory...
CVE-2004-0483
Unknown vulnerability in rpc.mountd for SGI IRIX 6.5.24 allows remote attackers to cause a denial of service infinite loop via certain RPC requests...
CVE-2004-0135
The syssgi SGIIOPROBE system call in IRIX 6.5.20 through 6.5.24 allows local users to gain privileges by reading and writing to kernel memory...
CVE-2004-0136
The mapelf32exec function call in IRIX 6.5.20 through 6.5.24 allows local users to cause a denial of service system crash via a "corrupted binary."...
CVE-2004-0135
The CVE-2004-0135 entry concerns the SGI IO system call SGI_IOPROBE in IRIX 6.5.20–6.5.24, which allows local users to gain privileges by reading and writing kernel memory. The vulnerability is confirmed in multiple sources: NVD/NVD entry already specifies the affected IRIX versions and the local...
CVE-2004-0137
CVE-2004-0137 = Unknown vulnerability in IRIX init affecting IRIX 6.5.20 through 6.5.24. Local users can cause a denial of service (system panic) due to page invalidation issues. The NVD/NVD-derived entries confirm local-exploit viability with impact limited to availability (partial) and no confi...
CVE-2004-0136
The CVE-2004-0136 issue affects IRIX 6.5.20–6.5.24 via the mapelf32exec system call, enabling a local attacker to trigger a denial-of-service (system crash) by processing a malformed binary. SGI’s Security Advisory 20040601-01-P notes this as CAN-2004-0136 and provides fixes: upgrade to IRIX 6.5....