1089 matches found
CVE-1999-0413
CVE-1999-0413 describes a buffer overflow in the SGI X server that enables a local user to gain root privileges via the X server font path. The Red Hat and CVE records corroborate the same core issue: a local-exploit path that could lead to full compromise on affected systems running SGI X server...
CVE-1999-0314
ioconfig on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames...
CVE-1999-0125
CVE-1999-0125 describes a local buffer overflow in the SGI IRIX mailx program. The vulnerability affects the mailx component of SGI IRIX; the root cause is a buffer overflow that can impact confidentiality, integrity and availability (partial impacts) when an attacker with local access and no aut...
CVE-1999-0328
SGI permissions program allows local users to gain root privileges...
CVE-1999-0029
CVE-1999-0029 describes a buffer overflow in the ordist command on SGI IRIX systems that can grant root privileges. The connected records corroborate: ordist buffer overflow is the root cause, affecting SGI IRIX environments, with privilege escalation to root (local, low complexity). The provided...
CVE-1999-0126
CVE-1999-0126 describes a buffer overflow in SGI IRIX affecting the xterm and Xaw components, enabling local privilege escalation to root. The root cause is a memory overflow in these X-related tools, leading to compromise of the running system with root access . Public details in the connected d...
CVE-1999-0039
CVE-1999-0039 refers to the SGI IRIX webdist CGI (webdist.cgi). The vulnerability allows remote attackers to execute arbitrary commands by supplying shell metacharacters in the distloc parameter via the CGI, resulting in arbitrary command execution with the web server user privileges. Multiple so...
SGI Advanced Linux Environment 3.0 / SGI IRIX 6.5.4 / SGI UNICOS 10.0 6 - arrayd.auth Default Configuration
/ source: https://www.securityfocus.com/bid/530/info The SGI Array Services provide a mechanism to simplify administering and managing an array of clustered systems. The arrayd1m program is part of the arrayservices5 and is known as the array services daemon. The default configuration for...
SGI Advanced Linux Environment 3.0 SGI IRIX 6.5.4 SGI UNICOS 10.0 6 - arrayd.auth Default Configuration
SGI Advanced Linux Environment 3.0 SGI IRIX 6.5.4 SGI UNICOS 10.0 6 - arrayd.auth Default Configuration / source: https://www.securityfocus.com/bid/530/info The SGI Array Services provide a mechanism to simplify administering and managing an array of clustered systems. The arrayd1m program is par...
CVE-1999-0765
SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor...
CVE-1999-0413
A buffer overflow in the SGI X server allows local users to gain root access through the X server font path...
[SECURITY] Seyon is vulnerable to a root exploit
Description We have received a report from SGI that a vulnerability has been discovered in the seyon program. This can lead to a root compromise. Any user who can execute the seyon program can exploit this vulnerability. Since SGI does not provide exploit information, we are unable to fix the...
CVE-1999-0314
ioconfig on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames...
CVE-1999-0313
diskbandwidth on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames...
CVE-1999-0329
SGI mediad program allows local users to gain root access...
CVE-1999-0126
SGI IRIX buffer overflow in xterm and Xaw allows root access...
CVE-1999-1501
1 ipxchk and 2 ipxlink in SGI OS2 IRIX 6.3 does not properly clear the IFS environmental variable before executing system calls, which allows local users to execute arbitrary commands...
CVE-1999-0270
Directory traversal vulnerability in pfdispaly.cgi program sometimes referred to as "pfdisplay" for SGI's Performer API Search Tool performertools allows remote attackers to read arbitrary files...
CVE-1999-1183
System Manager sysmgr GUI in SGI IRIX 6.4 and 6.3 allows remote attackers to execute commands by providing a trojan horse 1 runtask or 2 runexec descriptor file, which is used to execute a System Manager Task when the user's Mailcap entry supports the x-sgi-task or x-sgi-exec type...