CVE-1999-1286

The CVE-1999-1286 vulnerability affects SGI IRIX 6.2 and earlier with the addnetpr component. It allows local users to modify arbitrary files and potentially gain root access through a symlink attack on a temporary file. The description and sources provided corroborate a local-privilege-elevation...

CVE-1999-1286

addnetpr in SGI IRIX 6.2 and earlier allows local users to modify arbitrary files and possibly gain root access via a symlink attack on a temporary file...

CVE-1999-1319

Technical details about CVE-1999-1319 are not publicly available in the provided connected documents. Monitor for updates from official sources.

CVE-1999-1461

inpview in InPerson on IRIX 5.3 through IRIX 6.5.10 trusts the PATH environmental variable to find and execute the ttsession program, which allows local users to obtain root access by modifying the PATH to point to a Trojan horse ttsession program...

CVE-1999-1401

Vulnerability in Desktop searchbook program in IRIX 5.0.x through 6.2 sets insecure permissions for certain user files iconbook and searchbook...

CVE-1999-1554

/usr/sbin/Mail on SGI IRIX 3.3 and 3.3.1 does not properly set the group ID to the group ID of the user who started Mail, which allows local users to read the mail of other users...

CVE-1999-1501

1 ipxchk and 2 ipxlink in SGI OS2 IRIX 6.3 does not properly clear the IFS environmental variable before executing system calls, which allows local users to execute arbitrary commands...

CVE-1999-1501

CVE-1999-1501 affects SGI OS2 IRIX 6.3 components ipxchk and ipxlink, where the IFS environment variable is not properly cleared before executing system calls. This enables local users to run arbitrary commands. The vulnerability is tied to how environment state is preserved across these calls, a...

CVE-1999-1492

CVE-1999-1492 describes a vulnerability in IRIX 6.4 where the local attacker can leverage the diskperf and diskalign utilities to create arbitrary root-owned files, potentially gaining root privileges. The affected components are diskperf and diskalign on IRIX 6.4; the root cause is a local acces...

CVE-1999-1399

SpaceWare 7.3 v1.0 on IRIX 6.2 is affected by CVE-1999-1399. A local attacker can gain root privileges by placing commands in the HOSTNAME environment variable, which is then executed with elevated privileges. Affected component: spaceball/SpaceWare host-name handling; root-level impact is stated...

CVE-1999-1219

The CVE-1999-1219 entry concerns SGI’s sgihelp in the SGI help system and print manager on IRIX 5.2 and earlier. It states that local users can gain root privileges, possibly through the clogin command. The available sources reiterate this high-level vulnerability without providing concrete explo...

CVE-1999-1485

The CVE-1999-1485 issue concerns the nsd service in IRIX 6.5 through 6.5.2, which exports a virtual filesystem on a UDP port. According to the provided documents, this allows remote attackers to view files and can cause a possible denial of service by mounting the nsd virtual filesystem. The sour...

CVE-1999-1410

addnetpr in IRIX 5.3 and 6.2 allows local users to overwrite arbitrary files and possibly gain root privileges via a symlink attack on the printers temporary file...

CVE-1999-1410

The CVE-1999-1410 issue affects IRIX versions 5.3 and 6.2 and is caused by addnetpr failing to securely handle a symlink to the printer’s temporary file. This local-access vulnerability lets a non-privileged user overwrite arbitrary files and potentially gain root privileges via a symlink attack ...

Irix LPD tagprinter - Command Execution (Metasploit)

Irix LPD tagprinter - Command Execution Metasploit $Id: tagprinterexec.rb 10561 2010-10-06 00:53:45Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing...

Irix LPD tagprinter - Command Execution (Metasploit)

$Id: tagprinterexec.rb 10561 2010-10-06 00:53:45Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

CVE-2000-1193

Performance Metrics Collector Daemon PMCD in Performance Copilot in IRIX 6.x allows remote attackers to cause a denial of service resource exhaustion via an extremely long string to the PMCD port...

netprint DSO exploit

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: netprint DSO exploit Reference: CVE CAN-2001-0485 Number: 20010701-01-P Date: July 25, 2001 SGI provides this information freely to the SGI user community for its consideration, interpretation, implementation and use. SGI recommends...

Дырка в IRIX (netprint)

Переполнение буфера дает uid root...

HP-UX 11 / Linux Kernel 2.4 / Windows 2000/NT 4.0 / IRIX 6.5 - Small TCP MSS Denial of Service

/ source: https://www.securityfocus.com/bid/2997/info A potential denial of service vulnerability exists in several TCP stack implementations. TCP has a MSS maximum segment size option that is used by a TCP client to announce to a peer the maximum amount of TCP data that can be sent per segment...