irix.autofsd.txt

Date: Wed, 21 Oct 1998 16:07:49 -0700 From: RSI Advise To: [email protected] Subject: RSI.0010.10-21-98.IRIX.AUTOFSD RSI.0010.10-21-98.IRIX.AUTOFSD |:::. |::::: |::::. |::::: |::::: |::::. .. :: .. .. :: .. .. .. :: |:::: |:::: |:::: :::::: |::::: |:::: |: |: :: |: |: |:: |: |: :: |: :: |:::::...

irix-fcagent-DoS.txt

IRIX's fcagent daemon is vulnerable to a Denial of Service attack. IRIX's versions 6.4, 6.5 and 6.5.2 fcagent daemon is an RPC based daemon that services requests about status or configuration of a FibreVault enclosure a very fast fiber optics installation of Disks. Fcagent is vulnerable to a...

SGI Advanced Linux Environment 3.0 / SGI IRIX 6.5.4 / SGI UNICOS 10.0 6 - arrayd.auth Default Configuration

/ source: https://www.securityfocus.com/bid/530/info The SGI Array Services provide a mechanism to simplify administering and managing an array of clustered systems. The arrayd1m program is part of the arrayservices5 and is known as the array services daemon. The default configuration for...

IRIX wrap CGI Traversal Arbitrary Directory Listing

The 'wrap' CGI is installed. This CGI allows anyone to get a listing for any directory with mode +755. Note that not all implementations of 'wrap' are vulnerable. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

IRIX pfdispaly Arbitrary File Access

The 'pfdispaly' CGI is installed. This CGI has a well known security flaw that lets an attacker read arbitrary files with the privileges of the http daemon usually root or nobody. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...

CVE-1999-1485

nsd in IRIX 6.5 through 6.5.2 exports a virtual filesystem on a UDP port, which allows remote attackers to view files and cause a possible denial of service by mounting the nsd virtual file system...

SGI IRIX 6.5.2 - nsd Information Gathering

SGI IRIX 6.5.2 - nsd Information Gathering / source: https://www.securityfocus.com/bid/412/info A vulnerability has been discovered in the nsd service, as included by SGI in Irix 6.5.x. The vulnerability allows remote users to access potentially sensitive pieces of information, including, but not...

SGI IRIX 6.5.2 - 'nsd' Information Gathering

/ source: https://www.securityfocus.com/bid/412/info A vulnerability has been discovered in the nsd service, as included by SGI in Irix 6.5.x. The vulnerability allows remote users to access potentially sensitive pieces of information, including, but not limited to, NIS map information, shadow...

CVE-1999-0765

SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor...

SGI IRIX 6.5.4 - midikeys Root

SGI IRIX 6.5.4 - midikeys Root source: https://www.securityfocus.com/bid/262/info The setuid root "midikeys" executable can be used to edit arbitrary files via its graphical user interface. This grants malicious users root access to the system. Running the midikeys application, clicking in sounds...

SGI IRIX 6.5.4 - midikeys Root

source: https://www.securityfocus.com/bid/262/info The setuid root "midikeys" executable can be used to edit arbitrary files via its graphical user interface. This grants malicious users root access to the system. Running the midikeys application, clicking in sounds, and then songs will bring up ...

CVE-1999-0461

Versions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to insert and delete entries by spoofing a source address...

PT-1999-1143 · Wietse Venema · Rpcbind

Name of the Vulnerable Software and Affected Versions: rpcbind affected versions not specified Description: The issue allows a remote attacker to insert and delete entries by spoofing a source address in rpcbind, affecting versions including Linux, IRIX, and Wietse Venema's rpcbind...

CVE-1999-0463

Remote attackers can perform a denial of service using IRIX fcagent...

IRIX 6.26.3 - binlpstat Local Buffer Overflow

IRIX 6.26.3 - binlpstat Local Buffer Overflow / source: https://www.securityfocus.com/bid/1529/info Certain versions of IRIX ship with a version of lpstat which is vulnerable to a buffer overflow attack. The program, lpstat, is used to check the status of the printer being used by the IRIX machin...

IRIX 6.2/6.3 - '/bin/lpstat' Local Buffer Overflow

/ source: https://www.securityfocus.com/bid/1529/info Certain versions of IRIX ship with a version of lpstat which is vulnerable to a buffer overflow attack. The program, lpstat, is used to check the status of the printer being used by the IRIX machine. The problem is in the command line parsing...

CVE-1999-0088

IRIX and AIX automountd services autofsd allow remote users to execute root commands...

CVE-1999-1181

Vulnerability in On-Line Customer Registration software for IRIX 6.2 through 6.4 allows local users to gain root privileges...

SGI IRIX 6.4 - ioconfig Local Privilege Escalation

SGI IRIX 6.4 - ioconfig Local Privilege Escalation source: https://www.securityfocus.com/bid/213/info A vulnerability exists in the ioconfig program, as shipping with IRIX 6.4 S2MP from Silicon Graphics, Inc. This program is only available on Irix 6.4 for the Origin/Onyx2. Other machines running...

SGI IRIX 6.4 - 'ioconfig' Local Privilege Escalation

source: https://www.securityfocus.com/bid/213/info A vulnerability exists in the ioconfig program, as shipping with IRIX 6.4 S2MP from Silicon Graphics, Inc. This program is only available on Irix 6.4 for the Origin/Onyx2. Other machines running IRIX are not vulnerable. This vulnerability will...