936 matches found
rpc.pcnfsd vulnerabilities on IRIX
-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: rpc.pcnfsd vulnerabilities Number: 20020802-01-I Date: August 1, 2002 Reference: CERT® Advisory CA-1996-08 Reference: CAN-1999-0078 - ----------------------- - --- Issue Specifics --- - ----------------------- It's been reported that...
CVE-2002-0358
MediaMail and MediaMail Pro in SGI IRIX 6.5.16 and earlier allows local users to force the program to dump core via certain arguments, which could allow the users to read sensitive data or gain privileges...
SGI IRIX contains vulnerability in rpc.passwd allowing for root compromise
Overview There is a vulnerability in rpc.passwd that could allow root compromise. Description /usr/etc/rpc.passwd, part of the nfs.sw.nis subsystem on IRIX 6.5, could permit a root compromise. No other details are available. --- Impact Intruders could gain root access. --- Solution Apply a patch ...
CVE-2002-0652
xfsmd for IRIX 6.5 through 6.5.16 allows remote attackers to execute arbitrary code via shell metacharacters that are not properly filtered from several calls to the popen function, such as exportfs...
CVE-2002-0631
Unknown vulnerability in nveventd in NetVisualyzer on SGI IRIX 6.5 through 6.5.16 allows local users to write arbitrary files and gain root privileges...
CVE-2002-0359
xfsmd for IRIX 6.5 through 6.5.16 uses weak authentication, which allows remote attackers to call dangerous RPC functions, including those that can mount or unmount xfs file systems, to gain root privileges...
CVE-2002-0652
xfsmd for IRIX 6.5 through 6.5.16 allows remote attackers to execute arbitrary code via shell metacharacters that are not properly filtered from several calls to the popen function, such as exportfs...
CVE-2002-0652
CVE-2002-0652 affects xfsmd for IRIX 6.5 through 6.5.16. The vulnerability allows remote attackers to execute arbitrary code by supplying shell metacharacters that are not properly filtered in multiple calls to popen(), e.g., through export_fs(). The description and connected records confirm the ...
IRIX nveventd vulnerability
-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: nveventd vulnerability Number: 20020607-02-I Date: June 24, 2002 Reference: CAN-2002-0631 - -------------- - --- Update --- - -------------- Fixed formatting issue which caused PGP signature failure on some mailers. -...
CVE-2002-0038
Vulnerability in the cache-limiting function of the unified name service daemon nsd in IRIX 6.5.4 through 6.5.11 allows remote attackers to cause a denial of service by forcing the cache to fill the disk...
CVE-2002-0040
CVE-2002-0040 affects SGI IRIX 6.5.11–6.5.15f, where the HOSTALIASES environment variable can cause privileged applications to dump core, potentially enabling privilege escalation. The issue is local and was addressed by SGI in IRIX 6.5.16m/6.5.16f with patches; the advisory outlines affected com...
CVE-2000-1193
CVE-2000-1193 affects IRIX 6.x PMCD (Performance Metrics Collector Daemon) within Performance Copilot. The vulnerability allows remote attackers to exhaust resources and cause a denial of service by sending an extremely long string to the PMCD port. SGI’s advisory notes this requires upgrading to...
CVE-2000-1193
Performance Metrics Collector Daemon PMCD in Performance Copilot in IRIX 6.x allows remote attackers to cause a denial of service resource exhaustion via an extremely long string to the PMCD port...
CVE-2002-0040
Vulnerability in SGI IRIX 6.5.11 through 6.5.15f allows local users to cause privileged applications to dump core via the HOSTALIASES environment variable, which might allow the users to gain privileges...
CVE-2002-0038
Technical details about CVE-2002-0038 are not publicly provided in the supplied documents. The data confirms a denial-of-service risk in IRIX nsd 6.5.4–6.5.11, but no specifics on vectors or fixes are included here. Monitor for updates.
IRIX xfsmd vulnerability
-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: xfsmd vulnerability Number: 20020605-01-I Date: June 20, 2002 Reference: CAN-2002-0359 - ----------------------- - --- Issue Specifics --- - ----------------------- It's been reported that the /usr/etc/xfsmd daemon has security...
SGI IRIX 6.x - 'rpc.xfsmd' Remote Command Execution
// source: https://www.securityfocus.com/bid/5075/info Throghout the implementation of the supported remote procedure calls, the server uses the popen libc function. When popen is used, arguments passed to the RPC are included in the command string. These arguments are not sanitized. If shell...
Multiple bugs in Irix rpc.xfsmd
Weak encryption, uncommented shell-characters...
[LSD] IRIX rpc.xfsmd multiple remote root vulnerabilities
We have found several remotely exploitable vulnerabilities in the IRIX rpc.xfsmd service, which when properly exploited can result in an unauthorized root access to the vulnerable system. SGI was informed about this issue and assigned this bug number 858714. Xfsmd service is installed and started...