SGI Irix inpview (InPerson networked multimedia conferencing tool) privilege escalation

User supplied application is executed with superuser privileges...

iDEFENSE Security Advisory 01.13.05: SGI IRIX inpview Design Error Vulnerability

SGI IRIX inpview Design Error Vulnerability iDEFENSE Security Advisory 01.13.05 www.idefense.com/application/poi/display?id=182&type=vulnerabilities January 13, 2005 I. BACKGROUND The inpview program is a setuid root application that is included in the InPerson networked multimedia conferencing...

CVE-2005-0113

inpview in SGI IRIX allows local users to execute arbitrary commands via the SUNTTSESSIONCMD environment variable, which is executed by inpview without dropping privileges...

CVE-2004-0139

Unknown vulnerability in the bsd.a kernel networking for SGI IRIX 6.5.22 through 6.5.25, and possibly earlier versions, in which "tunbind changes tbind's behavior," has unknown impact and attack vectors...

CVE-2004-1889

Unknown vulnerability in ftpd in SGI IRIX 6.5.20 through 6.5.23 allows remote attackers to cause a denial of service hang via a link failure with Microsoft Windows...

CVE-2004-1891

The ftpsyslog function in ftpd in SGI IRIX 6.5.20 "doesn't work with anonymous FTP," which has an unknown impact, possibly preventing the actions of anonymous users from being logged...

CVE-2004-0139

Technical details about CVE-2004-0139 are not provided in the supplied documents; affected product, exploit, and impact are not specified. Monitor for updates.

CVE-2004-0139

Unknown vulnerability in the bsd.a kernel networking for SGI IRIX 6.5.22 through 6.5.25, and possibly earlier versions, in which "tunbind changes tbind's behavior," has unknown impact and attack vectors...

CVE-2004-0139: Undefined Security Weakness

Unknown vulnerability in the bsd.a kernel networking for SGI IRIX 6.5.22 through 6.5.25, and possibly earlier versions, in which "tunbind changes tbind's behavior," has unknown impact and attack vectors...

Multiple IRIX bugs

TCP connections spoofing, DoS...

[SA12682] SGI IRIX update for kernel

TITLE: SGI IRIX update for kernel SECUNIA ADVISORY ID: SA12682 VERIFY ADVISORY: http://secunia.com/advisories/12682/ CRITICAL: Moderately critical IMPACT: Spoofing, Manipulation of data, DoS WHERE: From remote OPERATING SYSTEM: SGI IRIX 6.5.x http://secunia.com/product/132/ DESCRIPTION: SGI has...

linux/x86 unix/SPARC irix/mips execve /bin/sh irx.mips 141 bytes

linux/x86 unix/SPARC irix/mips execve /bin/sh irx.mips 141 bytes. Shellcode exploits for multiple platform / Shellcode ejecuta execve /bin/sh en Irix/mips, Linux/x86, Unix/sparc by dymitr1 [email protected] / include char code=...

linux/x86 unix/SPARC irix/mips execve /bin/sh irx.mips 141 bytes

No description provided by source. / Shellcode ejecuta execve /bin/sh en Irix/mips, Linux/x86, Unix/sparc by dymitr1 [email protected] / include stdio.h char code= "\x37\x37\xeb\x2f\x30\x80\x00\x12\x04\x10\xff\xff\x24\x02\x03\xf3\x23\xff\x02\x14\x23\xe4\xfe\x08"...

linux/x86 unix/SPARC irix/mips execve /bin/sh irx.mips 141 bytes

Exploit for multiple platform in category shellcode ================================================================ linux/x86 unix/SPARC irix/mips execve /bin/sh irx.mips 141 bytes ================================================================ / Shellcode ejecuta execve /bin/sh en Irix/mips,...

CVE-2000-0797

CVE-2000-0797 describes a buffer overflow in IRIX’s gr_osview on IRIX 6.2/6.3 that allows local users to gain privileges via an excessively long -D option. The vulnerability is due to improper handling of long command-line arguments in gr_osview, enabling privilege escalation. Public references s...

CVE-2002-0357

CVE-2002-0357 relates to a vulnerability in SGI IRIX’s rpc.passwd binary (part of nfs.sw.nis) on IRIX 6.5.x and earlier. The issue arises in the remote RPC service yppasswdd (100009) and is described in multiple records as a buffer overflow that could allow a local or remote attacker to gain root...

CVE-2002-1419

The CVE concerns IRIX on SGI Origin 3000. Upgrading Origin 3000 to IRIX versions 6.5.13–6.5.16 changes the system MAC address, which could bypass or modify access restrictions based on MAC addresses. Affected environment: IRIX on Origin 3000 with those 6.5.x levels. Vulnerability impact: changes ...

CVE-2002-1516

The CVE-2002-1516 entry concerns rpcbind on SGI IRIX. When running rpcbind with the -w command line switch, a symlink-attack vulnerability could allow a local user to overwrite arbitrary files. Root cause: improper handling of symlinks by rpcbind under -w. Impact: local user could modify files, p...

CVE-2002-1517

The vulnerability CVE-2002-1517 affects IRIX 6.5: the fsr_efs component allows local users to perform unauthorized file activities via a symlink attack, possibly involving the .fsrlast file. The affected component is fsr_efs in IRIX 6.5, with a local attack vector and partial impacts to confident...

CVE-2002-1518

CVE-2002-1518 (IRIX 6.5): during a directory move with mv, a destination directory is created with world-writable permissions, enabling local users to modify files and directories. Root cause: permission handling in the move operation. No remediation details or exploit status are provided in the ...