SGI IRIX vulnerable to DoS when user space program calls the PIOCSWATCH ioctl() function

Overview A vulnerability in the SGI IRIX PIOCSWATCH ioctl function may allow local attackers to crash the operating system. Description SGI states that PIOCSWATCH ioctl "establishes or clears a set of watched areas in the traced process." According to SGI Security Advisory 20030603-01-P, a local...

Vulnerability in nsd LDAP Implementation on IRIX

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : Vulnerability in nsd LDAP Implementation Number : 20030407-01-P Date : April 25, 2003 Reference: CVE CAN-2003-0174 Reference: SGI BUGS 834042 874955 Fixed in : IRIX 6.5.20 when available or patch 5063 - ----------------------- - ---...

Multiple Vulnerabilities in BSD LPR Subsystem on IRIX update

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : Multiple Vulnerabilities in BSD LPR Subsystem Number : 20030406-02-P Date : April 25, 2003 Reference: CERT VU39001 Reference: CERT VU30308 Reference: CERT VU293305 Reference: CVE CAN-2003-0144 Reference: SGI Security Advisory...

xfsdump creates files insecurely on IRIX

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : xfsdump creates files insecurely Number : 20030404-01-P Date : April 10, 2003 Reference: CVE CAN-2003-0173 Reference: SGI BUG 885222 Fixed in : IRIX 6.5.20 when available or patches 5059 and 5060 - ----------------------- - --- Issu...

SGI IRIX "xfsdump" creates quota information files insecurely

Overview A vulnerability exists in xfsdump on SGI IRIX. Exploitation of this vulnerability may allow a local attacker to gain root privileges. Because other operating systems ship with xfsdump, vendors other than SGI may be affected. Description From the xfsdump man page:xfsdump backs up files an...

CVE-2002-0042

Vulnerability in the XFS file system for SGI IRIX before 6.5.12 allows local users to cause a denial of service hang by creating a file that is not properly processed by XFS...

CVE-2002-0173

Buffer overflow in SGI IRIX 6.5.x CPR (cpr) may allow a local user to execute arbitrary code with elevated privileges. Affected: /usr/sbin/cpr from eoe.sw.cpr on IRIX 6.5.10 and earlier. Root cause: buffer overflow in the cpr binary. Impact: local code execution with root privileges. Mitigation: ...

CVE-2002-0356

Vulnerability in XFS filesystem reorganizer fsrxfs in SGI IRIX 6.5.10 and earlier allows local users to gain root privileges by overwriting critical system files...

CVE-2002-0355

The SGI IRIX netstat vulnerability (CVE-2002-0355) affects the /usr/etc/netstat binary in IRIX prior to 6.5.12, allowing local users to detect the existence of files they should not access. The issue is a local-access information-disclosure flaw; exploitation requires a local account. SGI states ...

CVE-2002-0356

CVE-2002-0356 concerns SGI IRIX affected by the fsr_xfs (XFS filesystem reorganizer) vulnerability. The issue allows a local user to gain root privileges by overwriting critical system files in IRIX 6.5.10 and earlier. SGI’s advisory notes this can lead to a root exploit, with a workaround and a ...

CVE-2002-0355

netstat in SGI IRIX before 6.5.12 allows local users to determine the existence of files on the system, even if the users do not have the appropriate permissions...

CVE-2002-0358

MediaMail and MediaMail Pro in SGI IRIX 6.5.16 and earlier allows local users to force the program to dump core via certain arguments, which could allow the users to read sensitive data or gain privileges...

CVE-2002-0017

Summary of CVE-2002-0017 (IRIX SNMPD): A buffer overflow in SGI IRIX SNMP daemon (snmpd) on IRIX 6.5 through 6.5.15m allows remote execution of arbitrary code via crafted SNMP requests. Affected: IRIX 6.5.x with the eoe.sw.netman SNMP components; exploitation requires remote access to SNMP servic...

CVE-2002-0631

Unknown vulnerability in nveventd in NetVisualyzer on SGI IRIX 6.5 through 6.5.16 allows local users to write arbitrary files and gain root privileges...

CVE-2002-0631

The SGI nveventd vulnerability (CVE-2002-0631) affects the NetVisualyzer component on IRIX 6.5.x (6.5.16 and earlier). A misconfiguration of /usr/NetVis/etc/nveventd allows a local unprivileged user to write arbitrary files and potentially gain root privileges. The advisory states SGI will not pr...

CVE-2002-0358

CVE-2002-0358 affects SGI IRIX systems where the MediaMail and MediaMail Pro binaries (located in /usr/binX11/MediaMail) could be coerced by certain user-supplied arguments to dump core. The underlying issue is a local privilege/ information-disclosure risk due to core dumps from privileged mail ...

CVE-2001-0891

Format string vulnerability in NQS daemon nqsdaemon in NQE 3.3.0.16 for CRAY UNICOS and SGI IRIX allows a local user to gain root privileges by using qsub to submit a batch job whose name contains formatting characters...

CVE-2002-0174

nsd on SGI IRIX before 6.5.11 allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the nsd.dump file...

CVE-2002-0017

Buffer overflow in SNMP daemon snmpd on SGI IRIX 6.5 through 6.5.15m allows remote attackers to execute arbitrary code via an SNMP request...

CVE-2001-0891

CVE-2001-0891 describes a format string vulnerability in the NQS daemon (nqsdaemon) of NQE 3.3.0.16 on CRAY UNICOS and SGI IRIX. A local user could gain root privileges by submitting a batch job with a name containing formatting characters (via qsub). The connected documents confirm the vulnerabi...