CVE-2002-0017

Summary of CVE-2002-0017 (IRIX SNMPD): A buffer overflow in SGI IRIX SNMP daemon (snmpd) on IRIX 6.5 through 6.5.15m allows remote execution of arbitrary code via crafted SNMP requests. Affected: IRIX 6.5.x with the eoe.sw.netman SNMP components; exploitation requires remote access to SNMP servic...

CVE-2002-0358

CVE-2002-0358 affects SGI IRIX systems where the MediaMail and MediaMail Pro binaries (located in /usr/binX11/MediaMail) could be coerced by certain user-supplied arguments to dump core. The underlying issue is a local privilege/ information-disclosure risk due to core dumps from privileged mail ...

CVE-2002-0174

nsd on SGI IRIX before 6.5.11 allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the nsd.dump file...

CVE-2002-0356

Vulnerability in XFS filesystem reorganizer fsrxfs in SGI IRIX 6.5.10 and earlier allows local users to gain root privileges by overwriting critical system files...

CVE-2002-0173

Buffer overflow in cpr for the eoe.sw.cpr SGI Checkpoint-Restart Software package on SGI IRIX 6.5.10 and earlier may allow local users to gain root privileges...

CVE-2001-0891

CVE-2001-0891 describes a format string vulnerability in the NQS daemon (nqsdaemon) of NQE 3.3.0.16 on CRAY UNICOS and SGI IRIX. A local user could gain root privileges by submitting a batch job with a name containing formatting characters (via qsub). The connected documents confirm the vulnerabi...

CVE-2002-0358

MediaMail and MediaMail Pro in SGI IRIX 6.5.16 and earlier allows local users to force the program to dump core via certain arguments, which could allow the users to read sensitive data or gain privileges...

CVE-2002-0356

CVE-2002-0356 concerns SGI IRIX affected by the fsr_xfs (XFS filesystem reorganizer) vulnerability. The issue allows a local user to gain root privileges by overwriting critical system files in IRIX 6.5.10 and earlier. SGI’s advisory notes this can lead to a root exploit, with a workaround and a ...

CVE-2002-1516

rpcbind in SGI IRIX, when using the -w command line switch, allows local users to overwrite arbitrary files via a symlink attack...

CVE-2002-0631

The SGI nveventd vulnerability (CVE-2002-0631) affects the NetVisualyzer component on IRIX 6.5.x (6.5.16 and earlier). A misconfiguration of /usr/NetVis/etc/nveventd allows a local unprivileged user to write arbitrary files and potentially gain root privileges. The advisory states SGI will not pr...

CVE-2002-0631

Unknown vulnerability in nveventd in NetVisualyzer on SGI IRIX 6.5 through 6.5.16 allows local users to write arbitrary files and gain root privileges...

CVE-2002-0042

Vulnerability in the XFS file system for SGI IRIX before 6.5.12 allows local users to cause a denial of service hang by creating a file that is not properly processed by XFS...

CVE-2001-0891

Format string vulnerability in NQS daemon nqsdaemon in NQE 3.3.0.16 for CRAY UNICOS and SGI IRIX allows a local user to gain root privileges by using qsub to submit a batch job whose name contains formatting characters...

SGI IRIX sets insecure permissions on "/dev/ipfilter"

Overview A locally exploitable denial-of-service vulnerability in SGI IRIX may allow a local attacker to disrupt network traffic. Description SGI IRIX contains a locally exploitable denial-of-service vulnerability. For more information, please see SGI Security Advisory 20020408-01-I. --- Impact A...

Buffer Overflow in SGI IRIX syslogd

Overview A remotely exploitable buffer overflow in SGI IRIX syslogd may allow an attacker to crash syslogd or execute arbitrary code. Description There is a remotely exploitable buffer overflow in SGI IRIX syslogd. For more detailed information please see SGI Security Advisory 20020405-01-I. ---...

Buffer Overrun Vulnerability in /sbin/ps on IRIX

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : Buffer Overrun Vulnerability in /sbin/ps Number : 20030202-01-I Date : February 26, 2003 Reference: CVE-1999-0301 Reference: SGI BUG 696723 Fixed in : IRIX 6.5.5 or later - ----------------------- - --- Issue Specifics --- -...

CVE-2002-2093

The Video Control Panel on SGI O2/IRIX 6.5, when the Default Input is set to "Output Video", allows attackers to access a console session by running videoout then videoin...

CVE-2002-1787

Buffer overflow in uux in eoe.sw.uucp package of SGI IRIX 6.5 through 6.5.17 allows local users to execute arbitrary code via unknown attack vectors...

CVE-2002-1786

SGI IRIX 6.5 through 6.5.14 applies a umask of 022 to root core dumps, which allows local users to read the core dumps and possibly obtain sensitive information...

CVE-2002-1791

SGI IRIX 6.5 through 6.5.17 creates temporary desktop files with world-writable permissions, which allows local users to overwrite or corrupt those files...