Дырка в IRIX (rpc.espd buffer overflow)

Классическое переполнение буфера с remote root...

ISSalert: ISS Security Advisory: Remote Buffer Overflow Vulnerability in IRIX Embedded Support Partner Infrastructure

TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any problems! --------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security...

SGI IRIX Embedded Support Partner (ESP) service rpc.espd contains buffer overflow

Overview There is a remotely-accessible buffer overflow in SGI IRIX systems running rpc.espd that may allow remote attackers to execute arbitrary code. The Embedded Support Partner daemon rpc.espd is enabled by default on all IRIX versions since 6.5.5. Description The Embedded Support Partner...

IRIX 5.36.26.36.46.56.5.11 - usrlibprintnetprint Local Privilege Escalation

IRIX 5.36.26.36.46.56.5.11 - usrlibprintnetprint Local Privilege Escalation !/bin/sh copyright LAST STAGE OF DELIRIUM jul 2000 poland ://lsd-pl.net/ /usr/lib/print/netprint This code gets released due to another post to the Bugtraq mailing list. For IRIX 6.3 and above this privilage escalation...

IRIX (5.3/6.2/6.3/6.4/6.5/6.5.11) /usr/lib/print/netprint Local Exploit

Exploit for irix platform in category local exploits ======================================================================= IRIX 5.3/6.2/6.3/6.4/6.5/6.5.11 /usr/lib/print/netprint Local Exploit ======================================================================= !/bin/sh copyright LAST STAGE ...

IRIX 5.3/6.2/6.3/6.4/6.5/6.5.11 - '/usr/lib/print/netprint' Local Privilege Escalation

!/bin/sh copyright LAST STAGE OF DELIRIUM jul 2000 poland ://lsd-pl.net/ /usr/lib/print/netprint This code gets released due to another post to the Bugtraq mailing list. For IRIX 6.3 and above this privilage escalation attack can be conducted by local lp users only...

IRIX (5.3/6.2/6.3/6.4/6.5/6.5.11) /usr/bin/lpstat Local Exploit

Exploit for irix platform in category local exploits =============================================================== IRIX 5.3/6.2/6.3/6.4/6.5/6.5.11 /usr/bin/lpstat Local Exploit =============================================================== !/bin/sh copyright LAST STAGE OF DELIRIUM jul 2000...

IRIX 5.36.26.36.46.56.5.11 - usrbinlpstat Local Overflow Local Privilege Escalation

IRIX 5.36.26.36.46.56.5.11 - usrbinlpstat Local Overflow Local Privilege Escalation !/bin/sh copyright LAST STAGE OF DELIRIUM jul 2000 poland ://lsd-pl.net/ /usr/bin/lpstat EXECUTABLE=/usr/bin/lpstat FILE=file LIBRARY=lsd DIRECTORY=tmp cd $DIRECTORY cat $FILE $FILE chmod 666 $FILE cat $LIBRARY.c...

IRIX 5.3/6.2/6.3/6.4/6.5/6.5.11 - '/usr/bin/lpstat' Local Overflow / Local Privilege Escalation

!/bin/sh copyright LAST STAGE OF DELIRIUM jul 2000 poland ://lsd-pl.net/ /usr/bin/lpstat EXECUTABLE=/usr/bin/lpstat FILE=file LIBRARY=lsd DIRECTORY=tmp cd $DIRECTORY cat $FILE $FILE chmod 666 $FILE cat $LIBRARY.c 'EOF' OpenConn printf"copyright LAST STAGE OF DELIRIUM jul 2000 poland...

IRIX /usr/lib/print/netprint local root symbols exploit.

i haven't audited anything in some time. well, i just noticed this because i am doing a project with a name similar to "netprint" and i was wondering if it was at all related to what i was doing. it wasn't. but, i noticed it was setuid root and had a little bug. this bug takes advantage of the -n...

IRIX 5.36.x - netprint Arbitrary Shared Library Usage

IRIX 5.36.x - netprint Arbitrary Shared Library Usage // source: https://www.securityfocus.com/bid/2656/info The 'netprint' utility shipped with SGI Irix systems is used to send print jobs to print spoolers on remote hosts. It is installed setuid root by default. At the command line, 'netprint'...

IRIX 5.3/6.x - 'netprint' Arbitrary Shared Library Usage

// source: https://www.securityfocus.com/bid/2656/info The 'netprint' utility shipped with SGI Irix systems is used to send print jobs to print spoolers on remote hosts. It is installed setuid root by default. At the command line, 'netprint' accepts an option to specify the network type -n. This...

CVE-2000-0893

The CVE-2000-0893 entry concerns the Distributed GL Daemon (dgld) on SGI IRIX systems. The issue is that the dgld service listening on port 5232 allows remote attackers to identify the target as SGI IRIX. This is an information-disclosure/host-identity identification risk, not a remote code execu...

CVE-2000-0893

The presence of the Distributed GL Daemon dgld service on port 5232 on SGI IRIX systems allows remote attackers to identify the target host as an SGI system...

CVE-2000-0893: Undefined Security Weakness

The presence of the Distributed GL Daemon dgld service on port 5232 on SGI IRIX systems allows remote attackers to identify the target host as an SGI system...

CVE-2000-0283

The default installation of IRIX Performance Copilot allows remote attackers to access sensitive system information via the pmcd daemon...

CVE-2000-0283

The vulnerability CVE-2000-0283 affects IRIX Performance Copilot (pmcd daemon). In default installations, remote attackers could access sensitive system information via pmcd, leading to partial confidentiality impact. The issue is tied to the service exposing data; the documented remediation is t...

CVE-2000-0283: Undefined Security Weakness

The default installation of IRIX Performance Copilot allows remote attackers to access sensitive system information via the pmcd daemon...

SGI IRIX df buffer overflow in directory argument

Overview Description The df program is used to display statistics about the amount of used and free disc space on a set of mounted file systems. Alternately, it can be used to check on the amount of space available on unmounted block devices which may be specified by some path. Due to insufficien...

InPerson Vulnerabilities

SGI Security Advisory Title: InPerson Vulnerabilities Reference: CAN-2000-0799 Number: 20001101-01-I Date: November 20, 2000 SGI provides this information freely to the SGI user community for its consideration, interpretation, implementation and use. SGI recommends that this information be acted...