Multiple bugs in different Irix utilities

No description provided...

DCE 1.2.2c Denial of Service Vulnerability on IRIX

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : DCE 1.2.2c Denial of Service Vulnerability Number : 20030902-01-P Date : September, 26 2003 Reference : CVE CAN-2003-0746 Reference : SGI BUG 897593 Fixed in : Patches 5313/5314 for DCE 1.2.2c SGI provides this information freely to...

CVE-2003-0680

Unknown vulnerability in NFS for SGI IRIX 6.5.21 and earlier may allow an NFS client to bypass read-only restrictions...

CVE-2003-0680

CVE-2003-0680 affects NFS on SGI IRIX (6.5.21 and earlier). The issue is described as an unknown vulnerability that may allow an NFS client to bypass read-only restrictions. The provided connected documents do not supply a root cause, affected software details beyond SGI IRIX, or any remediation/...

CVE-2003-0680: Undefined Security Weakness

Unknown vulnerability in NFS for SGI IRIX 6.5.21 and earlier may allow an NFS client to bypass read-only restrictions...

Multiple IRIX bugs

Buffer overflow in login /usr/lib/iaf/scheme, multiple DNS server, NFS, cpr bugs...

Denial of Service Vulnerability in NFS XDR decoding Update

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : Denial of Service Vulnerability in NFS XDR decoding Update Number : 20030801-02-P Date : September 9, 2003 Reference: CVE CAN-2003-0576 Reference: SGI BUGS 894659, 898951 Fixed in : IRIX 6.5.20 or patches listed below for IRIX...

CVE-2003-0679

Unknown vulnerability in the libcpr library for the Checkpoint/Restart cpr system on SGI IRIX 6.5.21f and earlier allows local users to truncate or overwrite certain files...

CVE-2003-0575

Heap-based buffer overflow in the name services daemon nsd in SGI IRIX 6.5.x through 6.5.21f, and possibly earlier versions, allows attackers to gain root privileges via the AUTHUNIX gid list...

SGI IRIX contains buffer overflow vulnerability in "cpr" program

Overview A vulnerability in cpr may allow a local attacker execute arbitrary code. Description SGI describes cpr as follows:IRIX Checkpoint and Restart CPR offers a set of user-transparent software management tools, allowing system administrators, operators, and users with suitable privileges to...

CVE-2003-0176

The Name Service Daemon nsd, when running on an NIS master on SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, allows remote attackers to cause a denial of service crash via a UDP port scan...

CVE-2003-0177

SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, does not follow "-" entries in the /etc/group file, which may cause subsequent group membership entries to be processed inadvertently...

CVE-2003-0572

Unknown vulnerability in nsd in SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, allows attackers to cause a denial of service memory consumption...

CVE-2003-0574

Unknown vulnerability in SGI IRIX 6.5.x through 6.5.20, and possibly earlier versions, allows local users to cause a core dump in scheme and possibly gain privileges via certain environment variables, a different vulnerability than CVE-2001-0797 and CVE-1999-0028...

CVE-2003-0176

CVE-2003-0176 affects the IRIX Name Service Daemon (nsd) running as an NIS master on SGI IRIX 6.5.x (through 6.5.20f and possibly earlier). The vulnerability allows remote attackers to cause a denial of service (crash) by sending UDP port scans to nsd. Public sources in connected documents confir...

CVE-2003-0177

The CVE-2003-0177 entry concerns SGI IRIX 6.5.x (through 6.5.20f and possibly earlier) where /etc/group does not honor minus ('-') entries, causing subsequent group membership lines to be processed incorrectly. The issue is tied to the IRIX Name Service Daemon (nsd) and affects IRIX 6.5.x systems...

CVE-2003-0572

The CVE-2003-0572 issue concerns the SGI IRIX Name Service Daemon (nsd). The SGI advisory notes multiple nsd vulnerabilities in IRIX 6.5.x up to 6.5.20f (and possibly earlier), with the specific CVECAN-2003-0572 issue described as dynamic maps in nsd that can be made to consume memory, leading to...

CVE-2003-0573

CVE-2003-0573 relates to SGI IRIX’s Name Service Daemon (nsd). The issue is that DNS callbacks in nsd on IRIX 6.5.x (through 6.5.20f and possibly earlier) do not perform sufficient sanity checking. The impact is not explicitly stated in the CVE description, and exploitation details are not provid...

CVE-2003-0574

CVE-2003-0574 relates to a System V /bin/login vulnerability (CVE-2001-0797) manifested as a buffer overflow via a large number of environment variables/arguments, enabling potential privilege escalation. Connected entries describe Solaris/SPARC telnet/rlogin vectors and several exploits (e.g., T...

CVE-2003-0572

Unknown vulnerability in nsd in SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, allows attackers to cause a denial of service memory consumption...