CVE-2003-0575

Heap-based buffer overflow in the name services daemon nsd in SGI IRIX 6.5.x through 6.5.21f, and possibly earlier versions, allows attackers to gain root privileges via the AUTHUNIX gid list...

CVE-2003-0575

The IRIX nsd (name services daemon) vulnerability CVE-2003-0575 is a heap-based buffer overflow in the RPC AUTH_UNIX handling of nsd on IRIX 6.5.x (through 6.5.21f, possibly earlier). An attacker could trigger a buffer overflow by sending a crafted UDP AUTH_UNIX packet, potentially gaining root a...

CVE-2003-0575: Undefined Security Weakness

Heap-based buffer overflow in the name services daemon nsd in SGI IRIX 6.5.x through 6.5.21f, and possibly earlier versions, allows attackers to gain root privileges via the AUTHUNIX gid list...

IRIX nsd server and modules mishandle AUTH_UNIX gid list

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : IRIX nsd server and modules mishandle AUTHUNIX gid list Number : 20030704-01-P Date : July 29, 2003 Reference : CVE CAN-2003-0575 Reference : SGI BUG 873591 Fixed in : IRIX 6.5.22 or patches 5189-5197 SGI provides this information...

[LSD] IRIX nsd remote buffer overflow vulnerability

Hello, We have discovered a serious security vulnerability in the IRIX nsd service, which when properly exploited can result in an unauthorized remote root access to the vulnerable system. SGI was informed about this issue and assigned this bug number CVE CAN-2003-0575...

SGI IRIX name services daemon (nsd) and modules mishandle AUTH_UNIX gid list

Overview A remotely exploitable vulnerability has been discoved in the "nsd" service for SGI IRIX systems. A remote attacker may be able to gain root access to the vulnerable system. Description A remotely exploitable heap overflow vulnerability has been discovered in a function for the RPC...

Login Vulnerabilities on IRIX

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : Login Vulnerabilities Number : 20030702-01-P Date : July 16, 2003 Reference: CVE CAN-2003-0574 Reference: SGI BUGS 850587 889119 Fixed in : IRIX 6.5.21 or patch 5182 SGI provides this information freely to the SGI user community for...

Multiple Vulnerabilities in Name Service Daemon (nsd) on IRIX

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : Multiple Vulnerabilities in Name Service Daemon nsd Number : 20030701-01-P Date : July 16, 2003 Reference: CVE CAN-2003-0176, CAN-2003-0177, CAN-2003-0572, CAN-2003-0573 Reference: SGI BUGS 844401, 866833, 862096, 849491 Fixed in :...

CVE-2003-0472

The IPv6 capability in IRIX 6.5.19 allows remote attackers to cause a denial of service hang in inetd via port scanning...

CVE-2003-0473

Technical details for CVE-2003-0473 are not publicly available in the provided documents. No product, vector, impact, or patch information is listed. Monitor for official updates.

CVE-2003-0472

The CVE-2003-0472 entry concerns IRIX 6.5.19: enabling IPv6 causes a remote attacker to trigger a denial-of-service (hang) in inetd via port scanning. This is documented in the NVD/NIST record; no exploit code or specific vulnerable component/version beyond IRIX 6.5.19 IPv6 capability is provided...

CVE-2003-0473

Unknown vulnerability in the IPv6 capability in IRIX 6.5.19 causes snoop to process packets as the root user, with unknown implications...

CVE-2003-0472: Undefined Security Weakness

The IPv6 capability in IRIX 6.5.19 allows remote attackers to cause a denial of service hang in inetd via port scanning...

CVE-2003-0473: Undefined Security Weakness

Unknown vulnerability in the IPv6 capability in IRIX 6.5.19 causes snoop to process packets as the root user, with unknown implications...

SGI IRIX vulnerable to DoS when user space program calls the PIOCSWATCH ioctl() function

Overview A vulnerability in the SGI IRIX PIOCSWATCH ioctl function may allow local attackers to crash the operating system. Description SGI states that PIOCSWATCH ioctl "establishes or clears a set of watched areas in the traced process." According to SGI Security Advisory 20030603-01-P, a local...

bazarr CALL POLICE

/ irix 6.5 Mediamail buffer overflow!!! CALL BRAVO TEAM / / by: bazarr / / [email protected] / / bazarr episode 2 / ------------------- PREFACE THIS ADVISORY HAS BEEN HIGHLY HIGHLY HIGHLY CENSORED FOR EXTREME CONTENT PLEASE GOTO http://geocities.com/rrazab/adv/bazarr-episode-2.txt FOR THE...

CVE-2003-0174

The LDAP name service nsd in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been provided by an LDAP server, which could allow attackers to log in without a password...

CVE-2003-0174

The LDAP name service nsd in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been provided by an LDAP server, which could allow attackers to log in without a password...

CVE-2003-0174

The vulnerability affects SGI IRIX: the LDAP name service (nsd) and libns_ldap.so on IRIX 6.5.x (IRIX 6.5.19 and earlier). The root cause is that nsd does not verify whether the LDAP server provides the USERPASSWORD attribute for entries, which could allow an attacker to log in without a password...

PT-2003-1416 · Sgi · Irix

Name of the Vulnerable Software and Affected Versions: IRIX versions 6.5.19 and earlier Description: The issue concerns the LDAP name service nsd not properly verifying if the USERPASSWORD attribute has been provided by an LDAP server. This could allow attackers to log in without a password...