CVE-1999-1232: Undefined Security Weakness

Untrusted search path vulnerability in day5datacopier in SGI IRIX 6.2 allows local users to execute arbitrary commands via a modified PATH environment variable that points to a malicious cp program...

CVE-1999-1398: Undefined Security Weakness

Vulnerability in xfsdump in SGI IRIX may allow local users to obtain root privileges via the bck.log log file, possibly via a symlink attack...

CVE-1999-1492: Undefined Security Weakness

Vulnerability in 1 diskperf and 2 diskalign in IRIX 6.4 allows local attacker to create arbitrary root owned files, leading to root privileges...

CVE-1999-1319: Undefined Security Weakness

Vulnerability in object server program in SGI IRIX 5.2 through 6.1 allows remote attackers to gain root privileges in certain configurations...

CVE-1999-1401: Undefined Security Weakness

Vulnerability in Desktop searchbook program in IRIX 5.0.x through 6.2 sets insecure permissions for certain user files iconbook and searchbook...

CVE-1999-1461: Undefined Security Weakness

inpview in InPerson on IRIX 5.3 through IRIX 6.5.10 trusts the PATH environmental variable to find and execute the ttsession program, which allows local users to obtain root access by modifying the PATH to point to a Trojan horse ttsession program...

CVE-1999-1554: Undefined Security Weakness

/usr/sbin/Mail on SGI IRIX 3.3 and 3.3.1 does not properly set the group ID to the group ID of the user who started Mail, which allows local users to read the mail of other users...

CVE-1999-1485: Undefined Security Weakness

nsd in IRIX 6.5 through 6.5.2 exports a virtual filesystem on a UDP port, which allows remote attackers to view files and cause a possible denial of service by mounting the nsd virtual file system...

CVE-1999-1501: Undefined Security Weakness

1 ipxchk and 2 ipxlink in SGI OS2 IRIX 6.3 does not properly clear the IFS environmental variable before executing system calls, which allows local users to execute arbitrary commands...

Irix LPD tagprinter - Command Execution (Metasploit)

Irix LPD tagprinter - Command Execution Metasploit $Id: tagprinterexec.rb 10561 2010-10-06 00:53:45Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing...

Irix LPD tagprinter Command Execution

This module exploits an arbitrary command execution flaw in the in.lpd service shipped with all versions of Irix. Module Options msf use exploit/irix/lpd/tagprinter/exec msf undefinedexec show actions ...actions... msf undefinedexec set ACTION msf undefinedexec show options ...show and set...

Irix LPD tagprinter - Command Execution (Metasploit)

$Id: tagprinterexec.rb 10561 2010-10-06 00:53:45Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

CVE-2000-1193

Performance Metrics Collector Daemon PMCD in Performance Copilot in IRIX 6.x allows remote attackers to cause a denial of service resource exhaustion via an extremely long string to the PMCD port...

Дырка в IRIX (netprint)

Переполнение буфера дает uid root...

netprint DSO exploit

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: netprint DSO exploit Reference: CVE CAN-2001-0485 Number: 20010701-01-P Date: July 25, 2001 SGI provides this information freely to the SGI user community for its consideration, interpretation, implementation and use. SGI recommends...

HP-UX 11 / Linux Kernel 2.4 / Windows 2000/NT 4.0 / IRIX 6.5 - Small TCP MSS Denial of Service

/ source: https://www.securityfocus.com/bid/2997/info A potential denial of service vulnerability exists in several TCP stack implementations. TCP has a MSS maximum segment size option that is used by a TCP client to announce to a peer the maximum amount of TCP data that can be sent per segment...

CVE-2001-0331

Buffer overflow in Embedded Support Partner ESP daemon rpc.espd in IRIX 6.5.8 and earlier allows remote attackers to execute arbitrary commands...

CVE-2001-0485

Unknown vulnerability in netprint in IRIX 6.2, and possibly other versions, allows local users with lp privileges attacker to execute arbitrary commands via the -n option...

SGI Performance Co-Pilot 2.1.x2.2 - pmpost Symbolic Link

SGI Performance Co-Pilot 2.1.x2.2 - pmpost Symbolic Link // source: https://www.securityfocus.com/bid/2887/info Performance Co-Pilot PCP is a set of services to support system-level performance monitoring developed by SGI. It has traditionally been an IRIX product, however SGI has made it open...

SGI Performance Co-Pilot 2.1.x/2.2 - pmpost Symbolic Link

// source: https://www.securityfocus.com/bid/2887/info Performance Co-Pilot PCP is a set of services to support system-level performance monitoring developed by SGI. It has traditionally been an IRIX product, however SGI has made it open source and it is now available for Linux systems. One of th...