936 matches found
CVE-1999-0765
SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor...
CVE-1999-0765
The SGI IRIX midikeys vulnerability (CVE-1999-0765) resides in a setuid-root binary in /usr/sbin that allowed local users to modify root-owned files (notably /etc/passwd) via the text editor interface, enabling privilege escalation to root. The linked Red Hat/NVD entries corroborate the basic des...
IRIX 6.5.x - usrlibInPersoninpview Race Condition
IRIX 6.5.x - usrlibInPersoninpview Race Condition / source: https://www.securityfocus.com/bid/1530/info Certain versions of IRIX ship with a version of inpview that creates files in '/var/tmp/' in an insecure manner and is therefore prone to a race condition. InPerson's 'inpview' is a networked...
IRIX 6.5.x - '/usr/lib/InPerson/inpview' Race Condition
/ source: https://www.securityfocus.com/bid/1530/info Certain versions of IRIX ship with a version of inpview that creates files in '/var/tmp/' in an insecure manner and is therefore prone to a race condition. InPerson's 'inpview' is a networked multimedia conferencing tool. InPerson provides...
CVE-2000-0013
IRIX soundplayer program allows local users to gain privileges by including shell metacharacters in a .wav file, which is executed via the midikeys program...
SGI IRIX 6.2 - midikeyssoundplayer Local Privilege Escalation
SGI IRIX 6.2 - midikeyssoundplayer Local Privilege Escalation !/bin/sh source: https://www.securityfocus.com/bid/909/info SGI's Irix operating system ships with an X11 application called 'soundplayer' which is used to play .WAV files. It is not setuid root by itself, but can inherit root privileg...
SGI IRIX 6.2 - 'midikeys'/'soundplayer' Local Privilege Escalation
!/bin/sh source: https://www.securityfocus.com/bid/909/info SGI's Irix operating system ships with an X11 application called 'soundplayer' which is used to play .WAV files. It is not setuid root by itself, but can inherit root privileges if called by midikeys which is setuid on some old IRIX...
SCO Open Server 5.0.5 / IRIX 6.2 ibX11/X11 Toolkit/Athena Widget Library - Local Buffer Overflow
// source: https://www.securityfocus.com/bid/884/info SCO Openserver and SGI IRIX 6.2 confirmed, possibly others are vulnerable to several buffer overflows in various shared libraries related to the X window system. This means that all programs which link to these libraries could be vulnerable to...
SCO Open Server 5.0.5 IRIX 6.2 ibX11X11 ToolkitAthena Widget Library - Local Buffer Overflow
SCO Open Server 5.0.5 IRIX 6.2 ibX11X11 ToolkitAthena Widget Library - Local Buffer Overflow // source: https://www.securityfocus.com/bid/884/info SCO Openserver and SGI IRIX 6.2 confirmed, possibly others are vulnerable to several buffer overflows in various shared libraries related to the X...
Sun Solaris 7.0 - rpc.ttdbserver Denial of Service
Sun Solaris 7.0 - rpc.ttdbserver Denial of Service // source: https://www.securityfocus.com/bid/811/info It is possible to crash rpc.ttdbserver by using the old tddbserver buffer overflow exploit. This problem is caused by a NULL pointer being dereferenced when rpc function 15 is called with...
Muhammad M. Saggaf Seyon 2.14b - Relative Path
Muhammad M. Saggaf Seyon 2.14b - Relative Path source: https://www.securityfocus.com/bid/780/info Seyon uses relative pathnames to spawn two other programs which it requires. It is possible to exploit this vulnerability to obtain the priviliges which seyon runs with. It is installed by default...
Muhammad M. Saggaf Seyon 2.14b - Relative Path
source: https://www.securityfocus.com/bid/780/info Seyon uses relative pathnames to spawn two other programs which it requires. It is possible to exploit this vulnerability to obtain the priviliges which seyon runs with. It is installed by default setgid dialer on FreeBSD and root on Irix...
CVE-1999-0059
IRIX fam service allows an attacker to obtain a list of all files on the server...
CVE-1999-0026
CVE-1999-0026 affects SGI IRIX via a buffer overflow in the pset command that can grant root privileges. Affected software is IRIX; root access via local exploitation is implied, but the connected documents do not provide concrete details on vulnerable versions, specific exploit steps, or a confi...
CVE-1999-0029
root privileges via buffer overflow in ordist command on SGI IRIX systems...
CVE-1999-0025
root privileges via buffer overflow in df command on SGI IRIX systems...
CVE-1999-0027
CVE-1999-0027 affects SGI IRIX via a buffer overflow in the eject command that grants root privileges. The Red Hat and CVE listings confirm the same description; PT-1997-1011 notes affected SGI IRIX with no fix details available. The EUVD entry mentions Malware in sbrugna, not a direct technical ...
CVE-1999-0463
IRIX fcagent is the component described as vulnerable. The CVE notes a remote denial-of-service by unauthenticated network access with low complexity, yielding a partial availability impact (CVSS v2 base score 5.0). Red Hat and CVE records corroborate the same vulnerability description. The conne...
CVE-1999-0036
The IRIX login program is affected by CVE-1999-0036, where a nonzero LOCKOUT parameter enables creation or damage of files. The connected sources confirm this vulnerability exists in SGI IRIX’s login utility, but do not provide a concrete root-cause analysis or a documented fix. Reported details ...
