CVE-2002-1584

Unknown vulnerability in the AUTHDES authentication for RPC in Solaris 2.5.1, 2.6, and 7, SGI IRIX 6.5 to 6.5.19f, and possibly other platforms, allows remote attackers to gain privileges...

CVE-2002-0632

Vulnerability in SGI BDS Bulk Data Service BDSPro 2.4 and earlier allows clients to read arbitrary files on a BDS server...

WorldView vulnerability on IRIX

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: WorldView vulnerability Number: 20000803-01-P Date: August 21, 2002 Reference: SGI Security Advisory 20000803-01-A Reference: CVE CAN-2000-0704 - ----------------------- - --- Issue Specifics --- - ----------------------- This bullet...

CVE-2002-0632

The CVE-2002-0632 issue affects SGI BDSPro 2.4 and earlier, allowing a remote attacker to read arbitrary files on a BDS server. The SGI advisory notes exploitation by remote users without a local account and states the vulnerability is fixed in BDSPro 2.4 via a patch and in later versions (2.5+)....

CVE-2002-0632

Vulnerability in SGI BDS Bulk Data Service BDSPro 2.4 and earlier allows clients to read arbitrary files on a BDS server...

Bulk Data Services (BDS) vulnerability on IRIX

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: Bulk Data Services BDS vulnerability Number: 20020804-01-P Date: August 12, 2002 Reference: CAN-2002-0632 - ----------------------- - --- Issue Specifics --- - ----------------------- It's been reported that under certain conditions,...

SGI IRIX rpc.xfsmd does not filter shell metacharacters from user input before invoking popen() function

Overview The XFS journaling filesystem daemon uses a call to popen3 with unfiltered client-controlled input. This will lead to arbitrary command execution on remote systems. Description XFS is a 64-bit compliant journaling file system. The XFS journaling filesystem daemon xfsmd on SGI systems use...

CVE-2002-0358

MediaMail and MediaMail Pro in SGI IRIX 6.5.16 and earlier allows local users to force the program to dump core via certain arguments, which could allow the users to read sensitive data or gain privileges...

SGI IRIX contains vulnerability in rpc.passwd allowing for root compromise

Overview There is a vulnerability in rpc.passwd that could allow root compromise. Description /usr/etc/rpc.passwd, part of the nfs.sw.nis subsystem on IRIX 6.5, could permit a root compromise. No other details are available. --- Impact Intruders could gain root access. --- Solution Apply a patch ...

CVE-2002-0631

Unknown vulnerability in nveventd in NetVisualyzer on SGI IRIX 6.5 through 6.5.16 allows local users to write arbitrary files and gain root privileges...

IRIX pmpost vulnerability

SGI Security Advisory Title: pmpost vulnerability Number: 20010601-01-I Date: June 24, 2002 Reference: SGI Security Advisory 20010601-01-A Reference: CVE-2001-0823 - ----------------------- - --- Issue Specifics --- - ----------------------- It's been reported that the Performance Co-Pilot...

IRIX nveventd vulnerability

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: nveventd vulnerability Number: 20020607-02-I Date: June 24, 2002 Reference: CAN-2002-0631 - -------------- - --- Update --- - -------------- Fixed formatting issue which caused PGP signature failure on some mailers. -...

CVE-2002-0040

CVE-2002-0040 affects SGI IRIX 6.5.11–6.5.15f, where the HOSTALIASES environment variable can cause privileged applications to dump core, potentially enabling privilege escalation. The issue is local and was addressed by SGI in IRIX 6.5.16m/6.5.16f with patches; the advisory outlines affected com...

CVE-2002-0040

Vulnerability in SGI IRIX 6.5.11 through 6.5.15f allows local users to cause privileged applications to dump core via the HOSTALIASES environment variable, which might allow the users to gain privileges...

IRIX xfsmd vulnerability

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: xfsmd vulnerability Number: 20020605-01-I Date: June 20, 2002 Reference: CAN-2002-0359 - ----------------------- - --- Issue Specifics --- - ----------------------- It's been reported that the /usr/etc/xfsmd daemon has security...

SGI IRIX 6.x - 'rpc.xfsmd' Remote Command Execution

// source: https://www.securityfocus.com/bid/5075/info Throghout the implementation of the supported remote procedure calls, the server uses the popen libc function. When popen is used, arguments passed to the RPC are included in the command string. These arguments are not sanitized. If shell...

CVE-2002-0357

Unknown vulnerability in rpc.passwd in the nfs.sw.nis subsystem of SGI IRIX 6.5.15 and earlier allows local users to gain root privileges...

CVE-2002-0042

Vulnerability in the XFS file system for SGI IRIX before 6.5.12 allows local users to cause a denial of service hang by creating a file that is not properly processed by XFS...

IRIX talkd vulnerability

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: talkd vulnerability Number: 20020603-01-I Date: June 10, 2002 Reference: CVE-2000-1010 - ----------------------- - --- Issue Specifics --- - ----------------------- It's been reported that the /usr/etc/talkd daemon contains a format...

Xinet K-Talk Appletalk(tm) xkas vulnerability on IRIX

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: Xinet K-Talk Appletalktm xkas vulnerability Number: 20020604-01-I Date: June 10, 2002 Reference: CAN-2002-0213 - ----------------------- - --- Issue Specifics --- - ----------------------- It's been reported that the Appletalktm...