CVE-2002-1584

Technical details about CVE-2002-1584 are not publicly disclosed in the provided documents; no concrete information on affected products, root cause, or remediation is available here. Monitor for updates.

CVE-2002-1584

Unknown vulnerability in the AUTHDES authentication for RPC in Solaris 2.5.1, 2.6, and 7, SGI IRIX 6.5 to 6.5.19f, and possibly other platforms, allows remote attackers to gain privileges...

CVE-2005-0113

inpview in SGI IRIX allows local users to execute arbitrary commands via the SUNTTSESSIONCMD environment variable, which is executed by inpview without dropping privileges...

CVE-2005-0113

The CVE-2005-0113 vulnerability affects SGI IRIX by exploiting inpview: a local user can cause arbitrary commands to run via the SUN_TTSESSION_CMD environment variable, which is executed by inpview without dropping privileges, enabling local privilege escalation. Exploitation details and remediat...

SGI Irix inpview (InPerson networked multimedia conferencing tool) privilege escalation

User supplied application is executed with superuser privileges...

iDEFENSE Security Advisory 01.13.05: SGI IRIX inpview Design Error Vulnerability

SGI IRIX inpview Design Error Vulnerability iDEFENSE Security Advisory 01.13.05 www.idefense.com/application/poi/display?id=182&type=vulnerabilities January 13, 2005 I. BACKGROUND The inpview program is a setuid root application that is included in the InPerson networked multimedia conferencing...

CVE-2005-0113

inpview in SGI IRIX allows local users to execute arbitrary commands via the SUNTTSESSIONCMD environment variable, which is executed by inpview without dropping privileges...

CVE-2004-1889

Unknown vulnerability in ftpd in SGI IRIX 6.5.20 through 6.5.23 allows remote attackers to cause a denial of service hang via a link failure with Microsoft Windows...

CVE-2004-1891

The ftpsyslog function in ftpd in SGI IRIX 6.5.20 "doesn't work with anonymous FTP," which has an unknown impact, possibly preventing the actions of anonymous users from being logged...

CVE-2004-0139

Technical details about CVE-2004-0139 are not provided in the supplied documents; affected product, exploit, and impact are not specified. Monitor for updates.

CVE-2004-0139

Unknown vulnerability in the bsd.a kernel networking for SGI IRIX 6.5.22 through 6.5.25, and possibly earlier versions, in which "tunbind changes tbind's behavior," has unknown impact and attack vectors...

[SA12682] SGI IRIX update for kernel

TITLE: SGI IRIX update for kernel SECUNIA ADVISORY ID: SA12682 VERIFY ADVISORY: http://secunia.com/advisories/12682/ CRITICAL: Moderately critical IMPACT: Spoofing, Manipulation of data, DoS WHERE: From remote OPERATING SYSTEM: SGI IRIX 6.5.x http://secunia.com/product/132/ DESCRIPTION: SGI has...

CVE-2002-1516

rpcbind in SGI IRIX, when using the -w command line switch, allows local users to overwrite arbitrary files via a symlink attack...

CVE-2002-1516

The CVE-2002-1516 entry concerns rpcbind on SGI IRIX. When running rpcbind with the -w command line switch, a symlink-attack vulnerability could allow a local user to overwrite arbitrary files. Root cause: improper handling of symlinks by rpcbind under -w. Impact: local user could modify files, p...

CVE-2002-0357

CVE-2002-0357 relates to a vulnerability in SGI IRIX’s rpc.passwd binary (part of nfs.sw.nis) on IRIX 6.5.x and earlier. The issue arises in the remote RPC service yppasswdd (100009) and is described in multiple records as a buffer overflow that could allow a local or remote attacker to gain root...

CVE-2002-0357

Unknown vulnerability in rpc.passwd in the nfs.sw.nis subsystem of SGI IRIX 6.5.15 and earlier allows local users to gain root privileges...

CVE-2004-0134

cpr libcpr in SGI IRIX before 6.5.25 allows local users to gain privileges by loading a user provided library while restarting the checkpointed process...

CVE-2004-0483

Unknown vulnerability in rpc.mountd for SGI IRIX 6.5.24 allows remote attackers to cause a denial of service infinite loop via certain RPC requests...

IRIX syssgi system call vulnerability and other security fixes

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: syssgi system call vulnerability and other security fixes Number: 20040601-01-P Date: June 14, 2004 Reference: SGI BUG 914420, CVE CAN-2004-0135 Reference: SGI BUG 912601, CVE CAN-2004-0136 Reference: SGI BUG 907407, CVE CAN-2004-013...

CVE-2004-0134

The CVE-2004-0134 issue affects SGI IRIX prior to 6.5.25 where the cpr (libcpr) component can load a user-provided library during restart of a checkpointed process, allowing local privilege elevation. The vulnerability is tied to IRIX checkpoint/restart handling and could grant root-equivalent ac...