1118 matches found
CVE-2003-0576
Unknown vulnerability in the NFS daemon nfsd in SGI IRIX 6.5.19f and earlier allows remote attackers to cause a denial of service kernel panic via certain packets that cause XDR decoding errors, a different vulnerability than CVE-2003-0619...
CVE-2003-0679
CVE-2003-0679 concerns a vulnerability in the libcpr library used by SGI’s Checkpoint/Restart (cpr) on IRIX 6.5.x. The issue, reported as a local vulnerability, permits users to truncate or overwrite certain files for which they lack permissions. The SGI Security Advisory 20030802-01-P explains t...
CVE-2003-0679
Unknown vulnerability in the libcpr library for the Checkpoint/Restart cpr system on SGI IRIX 6.5.21f and earlier allows local users to truncate or overwrite certain files...
Denial of Service Vulnerability in NFS on IRIX
-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : Denial of Service Vulnerability in NFS XDR decoding Number : 20030801-01-P Date : August 13, 2003 Reference: CVE 2003-0576 Reference: SGI BUG 894659 Fixed in : IRIX 6.5.20 or patches 5229, 5230, 5240, 5241, 5227, 5228 SGI provides...
CVE-2003-0575
The IRIX nsd (name services daemon) vulnerability CVE-2003-0575 is a heap-based buffer overflow in the RPC AUTH_UNIX handling of nsd on IRIX 6.5.x (through 6.5.21f, possibly earlier). An attacker could trigger a buffer overflow by sending a crafted UDP AUTH_UNIX packet, potentially gaining root a...
CVE-2003-0575
Heap-based buffer overflow in the name services daemon nsd in SGI IRIX 6.5.x through 6.5.21f, and possibly earlier versions, allows attackers to gain root privileges via the AUTHUNIX gid list...
SGI IRIX name services daemon (nsd) and modules mishandle AUTH_UNIX gid list
Overview A remotely exploitable vulnerability has been discoved in the "nsd" service for SGI IRIX systems. A remote attacker may be able to gain root access to the vulnerable system. Description A remotely exploitable heap overflow vulnerability has been discovered in a function for the RPC...
IRIX nsd server and modules mishandle AUTH_UNIX gid list
-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : IRIX nsd server and modules mishandle AUTHUNIX gid list Number : 20030704-01-P Date : July 29, 2003 Reference : CVE CAN-2003-0575 Reference : SGI BUG 873591 Fixed in : IRIX 6.5.22 or patches 5189-5197 SGI provides this information...
Login Vulnerabilities on IRIX
-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : Login Vulnerabilities Number : 20030702-01-P Date : July 16, 2003 Reference: CVE CAN-2003-0574 Reference: SGI BUGS 850587 889119 Fixed in : IRIX 6.5.21 or patch 5182 SGI provides this information freely to the SGI user community for...
SGI IRIX vulnerable to DoS when user space program calls the PIOCSWATCH ioctl() function
Overview A vulnerability in the SGI IRIX PIOCSWATCH ioctl function may allow local attackers to crash the operating system. Description SGI states that PIOCSWATCH ioctl "establishes or clears a set of watched areas in the traced process." According to SGI Security Advisory 20030603-01-P, a local...
Multiple Vulnerabilities in BSD LPR Subsystem on IRIX update
-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : Multiple Vulnerabilities in BSD LPR Subsystem Number : 20030406-02-P Date : April 25, 2003 Reference: CERT VU39001 Reference: CERT VU30308 Reference: CERT VU293305 Reference: CVE CAN-2003-0144 Reference: SGI Security Advisory...
Vulnerability in nsd LDAP Implementation on IRIX
-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : Vulnerability in nsd LDAP Implementation Number : 20030407-01-P Date : April 25, 2003 Reference: CVE CAN-2003-0174 Reference: SGI BUGS 834042 874955 Fixed in : IRIX 6.5.20 when available or patch 5063 - ----------------------- - ---...
xfsdump creates files insecurely on IRIX
-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : xfsdump creates files insecurely Number : 20030404-01-P Date : April 10, 2003 Reference: CVE CAN-2003-0173 Reference: SGI BUG 885222 Fixed in : IRIX 6.5.20 when available or patches 5059 and 5060 - ----------------------- - --- Issu...
SGI IRIX "xfsdump" creates quota information files insecurely
Overview A vulnerability exists in xfsdump on SGI IRIX. Exploitation of this vulnerability may allow a local attacker to gain root privileges. Because other operating systems ship with xfsdump, vendors other than SGI may be affected. Description From the xfsdump man page:xfsdump backs up files an...
CVE-2002-0355
netstat in SGI IRIX before 6.5.12 allows local users to determine the existence of files on the system, even if the users do not have the appropriate permissions...
CVE-2002-0172
/dev/ipfilter on SGI IRIX 6.5 is installed by /dev/MAKEDEV with insecure default permissions 644, which could allow a local user to cause a denial of service traffic disruption...
CVE-2002-0172
CVE-2002-0172 concerns SGI IRIX 6.5 where the /dev/ipfilter device is created by /dev/MAKEDEV with insecure default permissions (644). A local user could exploit this to cause a denial of service by disrupting network traffic. The issue is mitigated by upgrading to IRIX 6.5.11 or later, as noted ...
CVE-2002-0355
The SGI IRIX netstat vulnerability (CVE-2002-0355) affects the /usr/etc/netstat binary in IRIX prior to 6.5.12, allowing local users to detect the existence of files they should not access. The issue is a local-access information-disclosure flaw; exploitation requires a local account. SGI states ...
CVE-2002-0173
Buffer overflow in SGI IRIX 6.5.x CPR (cpr) may allow a local user to execute arbitrary code with elevated privileges. Affected: /usr/sbin/cpr from eoe.sw.cpr on IRIX 6.5.10 and earlier. Root cause: buffer overflow in the cpr binary. Impact: local code execution with root privileges. Mitigation: ...