CVE-2001-0891: Undefined Security Weakness

Format string vulnerability in NQS daemon nqsdaemon in NQE 3.3.0.16 for CRAY UNICOS and SGI IRIX allows a local user to gain root privileges by using qsub to submit a batch job whose name contains formatting characters...

CVE-2002-0356: Undefined Security Weakness

Vulnerability in XFS filesystem reorganizer fsrxfs in SGI IRIX 6.5.10 and earlier allows local users to gain root privileges by overwriting critical system files...

CVE-2002-0172: Undefined Security Weakness

/dev/ipfilter on SGI IRIX 6.5 is installed by /dev/MAKEDEV with insecure default permissions 644, which could allow a local user to cause a denial of service traffic disruption...

CVE-2002-0173: Undefined Security Weakness

Buffer overflow in cpr for the eoe.sw.cpr SGI Checkpoint-Restart Software package on SGI IRIX 6.5.10 and earlier may allow local users to gain root privileges...

Multiple Vulnerabilities and Enhancements in ftpd on IRIX

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : Multiple Vulnerabilities and Enhancements in ftpd Number : 20030304-01-P Date : March 24, 2003 Reference: CERT CA-1997-27 Reference: CERT VU2558 Reference: CERT VU258721 Reference: CVE CVE-1999-0017 Reference: CVE CVE-1999-0097...

Buffer Overflow in SGI IRIX syslogd

Overview A remotely exploitable buffer overflow in SGI IRIX syslogd may allow an attacker to crash syslogd or execute arbitrary code. Description There is a remotely exploitable buffer overflow in SGI IRIX syslogd. For more detailed information please see SGI Security Advisory 20020405-01-I. ---...

SGI IRIX sets insecure permissions on "/dev/ipfilter"

Overview A locally exploitable denial-of-service vulnerability in SGI IRIX may allow a local attacker to disrupt network traffic. Description SGI IRIX contains a locally exploitable denial-of-service vulnerability. For more information, please see SGI Security Advisory 20020408-01-I. --- Impact A...

Irix Performance Copilot Service Information Disclosure

The service 'IRIX performance copilot' is running. This service discloses sensitive information about the remote host, and may be used by an attacker to perform a local denial of service. This warning may be a false positive since the presence of the bug was not verified locally. C Tenable Networ...

Buffer Overrun Vulnerability in /sbin/ps on IRIX

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : Buffer Overrun Vulnerability in /sbin/ps Number : 20030202-01-I Date : February 26, 2003 Reference: CVE-1999-0301 Reference: SGI BUG 696723 Fixed in : IRIX 6.5.5 or later - ----------------------- - --- Issue Specifics --- -...

CVE-2002-1791

SGI IRIX 6.5 through 6.5.17 creates temporary desktop files with world-writable permissions, which allows local users to overwrite or corrupt those files...

CVE-2002-1786

SGI IRIX 6.5 through 6.5.14 applies a umask of 022 to root core dumps, which allows local users to read the core dumps and possibly obtain sensitive information...

CVE-2002-1787

Buffer overflow in uux in eoe.sw.uucp package of SGI IRIX 6.5 through 6.5.17 allows local users to execute arbitrary code via unknown attack vectors...

CVE-2002-2093

The Video Control Panel on SGI O2/IRIX 6.5, when the Default Input is set to "Output Video", allows attackers to access a console session by running videoout then videoin...

CVE-2002-1584

Unknown vulnerability in the AUTHDES authentication for RPC in Solaris 2.5.1, 2.6, and 7, SGI IRIX 6.5 to 6.5.19f, and possibly other platforms, allows remote attackers to gain privileges...

rpcbind/fsr_efs/mv/errhook/uux vulnerabilities update

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: rpcbind/fsrefs/mv/errhook/uux vulnerabilities update Number: 20020903-02-P Date: October 14, 2002 - -------------- - --- Update --- - -------------- The patches in the original advisory are incompatible with R4000-class hardware...

rpcbind/fsr_efs/mv/errhook/uux vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: rpcbind/fsrefs/mv/errhook/uux vulnerabilities Number: 20020903-01-P Date: October 3, 2002 - ----------------------- - --- Issue Specifics --- - ----------------------- It's been reported that there are several vulnerabilities in...

rpc.pcnfsd vulnerabilities on IRIX

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: rpc.pcnfsd vulnerabilities Number: 20020802-01-I Date: August 1, 2002 Reference: CERT® Advisory CA-1996-08 Reference: CAN-1999-0078 - ----------------------- - --- Issue Specifics --- - ----------------------- It's been reported that...

CVE-2002-0358

MediaMail and MediaMail Pro in SGI IRIX 6.5.16 and earlier allows local users to force the program to dump core via certain arguments, which could allow the users to read sensitive data or gain privileges...

SGI IRIX contains vulnerability in rpc.passwd allowing for root compromise

Overview There is a vulnerability in rpc.passwd that could allow root compromise. Description /usr/etc/rpc.passwd, part of the nfs.sw.nis subsystem on IRIX 6.5, could permit a root compromise. No other details are available. --- Impact Intruders could gain root access. --- Solution Apply a patch ...

CVE-2002-0359

xfsmd for IRIX 6.5 through 6.5.16 uses weak authentication, which allows remote attackers to call dangerous RPC functions, including those that can mount or unmount xfs file systems, to gain root privileges...