1066 matches found
Дырка в IRIX Workshop
Утилита cvconnect позволяет переписать любой файл в системе...
IRIX WorkShop cvconnect(1M) Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Silicon Graphics Inc. Security Advisory Title: IRIX WorkShop cvconnect1M Vulnerability Number: 20000601-01-P Date: June 20, 2000 Silicon Graphics provides this information freely to the SGI user community for its consideration, interpretation, implementation and...
CVE-2000-0579
IRIX crontab creates temporary files with predictable file names and with the umask of the user, which could allow local users to modify another user's crontab file as it is being edited...
CVE-2000-0533
Vulnerability in cvconnect in SGI IRIX WorkShop allows local users to overwrite arbitrary files...
CVE-2000-0245
Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts...
CVE-2000-0245
Technical details about CVE-2000-0245 are not publicly available in the provided documents. Monitor for updates from official advisories.
CVE-2000-0245: Undefined Security Weakness
Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts...
Gauntlet Firewall 4.14.25.0 Webshield E-ppliance 100.0300.0 IRIX 6.5.x - Remote Buffer Overflow
Gauntlet Firewall 4.14.25.0 Webshield E-ppliance 100.0300.0 IRIX 6.5.x - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/1234/info A buffer overflow exists in the version of Mattel's Cyber Patrol software integrated in to Network Associates Gauntlet firewall, versions 4.1, 4.2...
Gauntlet Firewall 4.1/4.2/5.0 / Webshield E-ppliance 100.0/300.0 / IRIX 6.5.x - Remote Buffer Overflow
// source: https://www.securityfocus.com/bid/1234/info A buffer overflow exists in the version of Mattel's Cyber Patrol software integrated in to Network Associates Gauntlet firewall, versions 4.1, 4.2, 5.0 and 5.5. Due to the manner in which Cyber Patrol was integrated, a vulnerability was...
fingerd
I am new on the list so i dont know if you knew that. On Irix 6.4 with all patches installed the fingerd seems to like to display the shadow file to all users. ln -s /etc/shadow /path/user/.plan finger [email protected] This feature was found by a student -Zanikolas Serafim- while he was...
Большие проблемы с fingerd в IRIX
fingerd работает с привилегиями root и при этом следует символьным линком при чтении .plan в домашнем каталоге пользователя, что позволяет пользователю прочитать любой файл...
Performance Copilot for IRIX 6.5
Hi All, I found a vulnerability in the Performance Copilot for IRIX 6.5 Summary: /usr/etc/pmcd has a fail-open security model, allowing anyone to perform queries by default. This exposes potentially sensitive information ps -efl, df, etc to anyone on the net. pmcd will accept garbage connections...
CVE-2000-0283
The default installation of IRIX Performance Copilot allows remote attackers to access sensitive system information via the pmcd daemon...
Irix Objectserver remote exploit
At 08:52 AM 3/29/2000 -0500, Howard wrote: Since the patches are now officially released, I feel I can finally release the details of the SGI objectserver vulnerability. This vulnerability was initailly reported to CERT and SGI Security on October 6, 1997. A beta version of patch 2849 was provide...
Objectserver vulnerability
Since the patches are now officially released, I feel I can finally release the details of the SGI objectserver vulnerability. This vulnerability was initailly reported to CERT and SGI Security on October 6, 1997. A beta version of patch 2849 was provided in February 1998. Howard ----- Forwarded...
Проблемы с object server в Irix
уязвимость позволяет удаленно создать непривилегированный эккаунт...
SGI IRIX 5.x/6.x - Objectserver
// source: https://www.securityfocus.com/bid/1079/info A vulnerability exists in SGI's Objectserver service. By exploiting a vulnerability in this service, remote attackers can add root privileged accounts to the system being compromised. While a patch was made available, and IRIX 6.2 systems wer...
SGI Security Advisory
SGI Security Advisory Title: Vulnerability in IRIX 5.3 and 6.2 objectserver Number: 20000303-01-PX Date: March 28, 2000 SGI provides this information freely to the SGI user community for its consideration, interpretation, implementation and use. SGI recommends that this information be acted upon ...