CVE-2000-0245

Technical details about CVE-2000-0245 are not publicly available in the provided documents. Monitor for updates from official advisories.

Gauntlet Firewall 4.14.25.0 Webshield E-ppliance 100.0300.0 IRIX 6.5.x - Remote Buffer Overflow

Gauntlet Firewall 4.14.25.0 Webshield E-ppliance 100.0300.0 IRIX 6.5.x - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/1234/info A buffer overflow exists in the version of Mattel's Cyber Patrol software integrated in to Network Associates Gauntlet firewall, versions 4.1, 4.2...

Gauntlet Firewall 4.1/4.2/5.0 / Webshield E-ppliance 100.0/300.0 / IRIX 6.5.x - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/1234/info A buffer overflow exists in the version of Mattel's Cyber Patrol software integrated in to Network Associates Gauntlet firewall, versions 4.1, 4.2, 5.0 and 5.5. Due to the manner in which Cyber Patrol was integrated, a vulnerability was...

Большие проблемы с fingerd в IRIX

fingerd работает с привилегиями root и при этом следует символьным линком при чтении .plan в домашнем каталоге пользователя, что позволяет пользователю прочитать любой файл...

fingerd

I am new on the list so i dont know if you knew that. On Irix 6.4 with all patches installed the fingerd seems to like to display the shadow file to all users. ln -s /etc/shadow /path/user/.plan finger [email protected] This feature was found by a student -Zanikolas Serafim- while he was...

Performance Copilot for IRIX 6.5

Hi All, I found a vulnerability in the Performance Copilot for IRIX 6.5 Summary: /usr/etc/pmcd has a fail-open security model, allowing anyone to perform queries by default. This exposes potentially sensitive information ps -efl, df, etc to anyone on the net. pmcd will accept garbage connections...

CVE-2000-0283

The default installation of IRIX Performance Copilot allows remote attackers to access sensitive system information via the pmcd daemon...

Проблемы с object server в Irix

уязвимость позволяет удаленно создать непривилегированный эккаунт...

Objectserver vulnerability

Since the patches are now officially released, I feel I can finally release the details of the SGI objectserver vulnerability. This vulnerability was initailly reported to CERT and SGI Security on October 6, 1997. A beta version of patch 2849 was provided in February 1998. Howard ----- Forwarded...

Irix Objectserver remote exploit

At 08:52 AM 3/29/2000 -0500, Howard wrote: Since the patches are now officially released, I feel I can finally release the details of the SGI objectserver vulnerability. This vulnerability was initailly reported to CERT and SGI Security on October 6, 1997. A beta version of patch 2849 was provide...

SGI IRIX 5.x/6.x - Objectserver

// source: https://www.securityfocus.com/bid/1079/info A vulnerability exists in SGI's Objectserver service. By exploiting a vulnerability in this service, remote attackers can add root privileged accounts to the system being compromised. While a patch was made available, and IRIX 6.2 systems wer...

SGI Security Advisory

SGI Security Advisory Title: Vulnerability in IRIX 5.3 and 6.2 objectserver Number: 20000303-01-PX Date: March 28, 2000 SGI provides this information freely to the SGI user community for its consideration, interpretation, implementation and use. SGI recommends that this information be acted upon ...

CVE-2000-0245

Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts...

CVE-1999-0461

CVE-1999-0461 affects rpcbind implementations (Linux, IRIX and Wietse Venema’s rpcbind). The issue allows a remote attacker to insert and delete entries by spoofing the source address. Exploitation status is mentioned in multiple sources, but no specific patch/versions with a fix are provided in ...

CVE-1999-0030

The CVE-1999-0030 entry concerns the xlock command on SGI IRIX where a buffer overflow can grant root privileges. The core information across connected sources confirms: (1) affected component: xlock on SGI IRIX; (2) vulnerability type: buffer overflow leading to root privileges; (3) root-level i...

CVE-1999-0088

CVE-1999-0088 affects IRIX and AIX automountd services (autofsd). The connected records corroborate that remote users can execute root commands via these services. The available documents do not detail the exact root cause, affected versions, exploitation status, or specific remediation steps. Th...

CVE-1999-0030

root privileges via buffer overflow in xlock command on SGI IRIX systems...

CVE-1999-0088

IRIX and AIX automountd services autofsd allow remote users to execute root commands...

CVE-1999-0960

IRIX cdplayer allows local users to create directories in arbitrary locations via a command line option...

CVE-1999-0960

The CVE-1999-0960 entry concerns the IRIX cdplayer component. The vulnerability allows local users to create directories in arbitrary locations via a command line option, indicating potential abuse of filesystem operations by manipulating the cdplayer’s command-line parameters. The available refe...