1066 matches found
PT-2003-1416 · Sgi · Irix
Name of the Vulnerable Software and Affected Versions: IRIX versions 6.5.19 and earlier Description: The issue concerns the LDAP name service nsd not properly verifying if the USERPASSWORD attribute has been provided by an LDAP server. This could allow attackers to log in without a password...
Multiple Vulnerabilities in BSD LPR Subsystem on IRIX update
-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : Multiple Vulnerabilities in BSD LPR Subsystem Number : 20030406-02-P Date : April 25, 2003 Reference: CERT VU39001 Reference: CERT VU30308 Reference: CERT VU293305 Reference: CVE CAN-2003-0144 Reference: SGI Security Advisory...
Vulnerability in nsd LDAP Implementation on IRIX
-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : Vulnerability in nsd LDAP Implementation Number : 20030407-01-P Date : April 25, 2003 Reference: CVE CAN-2003-0174 Reference: SGI BUGS 834042 874955 Fixed in : IRIX 6.5.20 when available or patch 5063 - ----------------------- - ---...
CVE-2002-1419
The upgrade of IRIX on Origin 3000 to 6.5.13 through 6.5.16 changes the MAC address of the system, which could modify intended access restrictions that are based on a MAC address...
xfsdump creates files insecurely on IRIX
-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : xfsdump creates files insecurely Number : 20030404-01-P Date : April 10, 2003 Reference: CVE CAN-2003-0173 Reference: SGI BUG 885222 Fixed in : IRIX 6.5.20 when available or patches 5059 and 5060 - ----------------------- - --- Issu...
SGI IRIX "xfsdump" creates quota information files insecurely
Overview A vulnerability exists in xfsdump on SGI IRIX. Exploitation of this vulnerability may allow a local attacker to gain root privileges. Because other operating systems ship with xfsdump, vendors other than SGI may be affected. Description From the xfsdump man page:xfsdump backs up files an...
CVE-2002-0355
The SGI IRIX netstat vulnerability (CVE-2002-0355) affects the /usr/etc/netstat binary in IRIX prior to 6.5.12, allowing local users to detect the existence of files they should not access. The issue is a local-access information-disclosure flaw; exploitation requires a local account. SGI states ...
CVE-2002-0358
CVE-2002-0358 affects SGI IRIX systems where the MediaMail and MediaMail Pro binaries (located in /usr/binX11/MediaMail) could be coerced by certain user-supplied arguments to dump core. The underlying issue is a local privilege/ information-disclosure risk due to core dumps from privileged mail ...
CVE-2002-0359
Summary of the CVE-2002-0359 (IRIX xfsmd): The SGI XFS journaling file-system daemon (xfsmd), part of the optional eoe.sw.xfsmserv package on IRIX 6.5, uses a weak (default) AUTH_UNIX RPC authentication mechanism. This allows remote, unauthenticated attackers to invoke privileged RPC functions (i...
CVE-2002-0631
The SGI nveventd vulnerability (CVE-2002-0631) affects the NetVisualyzer component on IRIX 6.5.x (6.5.16 and earlier). A misconfiguration of /usr/NetVis/etc/nveventd allows a local unprivileged user to write arbitrary files and potentially gain root privileges. The advisory states SGI will not pr...
CVE-2002-0042
CVE-2002-0042 affects SGI IRIX XFS: local users can cause a hang/Denial of Service by creating a file not properly processed by XFS on IRIX
CVE-2002-0172
CVE-2002-0172 concerns SGI IRIX 6.5 where the /dev/ipfilter device is created by /dev/MAKEDEV with insecure default permissions (644). A local user could exploit this to cause a denial of service by disrupting network traffic. The issue is mitigated by upgrading to IRIX 6.5.11 or later, as noted ...
CVE-2002-0173
Buffer overflow in SGI IRIX 6.5.x CPR (cpr) may allow a local user to execute arbitrary code with elevated privileges. Affected: /usr/sbin/cpr from eoe.sw.cpr on IRIX 6.5.10 and earlier. Root cause: buffer overflow in the cpr binary. Impact: local code execution with root privileges. Mitigation: ...
CVE-2002-0017
Buffer overflow in SNMP daemon snmpd on SGI IRIX 6.5 through 6.5.15m allows remote attackers to execute arbitrary code via an SNMP request...
CVE-2002-0042
Vulnerability in the XFS file system for SGI IRIX before 6.5.12 allows local users to cause a denial of service hang by creating a file that is not properly processed by XFS...
CVE-2002-0173
Buffer overflow in cpr for the eoe.sw.cpr SGI Checkpoint-Restart Software package on SGI IRIX 6.5.10 and earlier may allow local users to gain root privileges...
CVE-2002-0174
nsd on SGI IRIX before 6.5.11 allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the nsd.dump file...
CVE-2002-0213
xkas in Xinet K-AShare 0.011.01 for IRIX allows local users to read arbitrary files via a symlink attack on the VOLICON file, which is copied to the .HSicon file in a shared directory...