IRIX 6.5.x - Performance Co-Pilot Remote Denial of Service

source: https://www.securityfocus.com/bid/4642/info Performance Co-Pilot PCP is a set of services to support system-level performance monitoring developed by SGI. It has traditionally been an IRIX product, however SGI has made it open source and it is now available for Linux systems. A...

ISS Advisory: Remote Buffer Overflow Vulnerability in IRIX SNMP Daemon

Internet Security Systems Security Advisory April 3, 2002 Remote Buffer Overflow Vulnerability in IRIX SNMP Daemon Synopsis: Internet Security Systems ISS X-Force has discovered a buffer overflow in the SNMP Simple Network Management Protocol daemon in the SGI IRIX operating system. The SNMP...

IRIX SNMP Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: SNMP Vulnerabilities Number: 20020201-01-P Date: April 3, 2002 Reference: CERT CA-2002-03 Reference: CVE CAN-2002-0013 Reference: CVE CAN-2002-0017 SGI provides this information freely to the SGI user community for its consideration,...

CVE-2002-0017

Buffer overflow in SNMP daemon snmpd on SGI IRIX 6.5 through 6.5.15m allows remote attackers to execute arbitrary code via an SNMP request...

CVE-2002-0039

CVE-2002-0039 affects SGI IRIX 6.5 (and older) where rpcbind is vulnerable to remote DoS via malformed RPC packets with invalid lengths, causing a crash. The issue is in the rpcbind/portmap handling and can be triggered remotely without local credentials. SGI released patches and fixes in IRIX 6....

CVE-2002-0039

rpcbind in SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, allows remote attackers to cause a denial of service crash via malformed RPC packets with invalid lengths...

CVE-2002-0039

rpcbind in SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, allows remote attackers to cause a denial of service crash via malformed RPC packets with invalid lengths...

CVE-2002-0040

Vulnerability in SGI IRIX 6.5.11 through 6.5.15f allows local users to cause privileged applications to dump core via the HOSTALIASES environment variable, which might allow the users to gain privileges...

CVE-1999-1143

Technical details for CVE-1999-1143 are not provided in the connected documents. The initial description summarizes a privilege escalation in SGI IRIX 6.x rld but no further public details are included here. Monitor for updates.

CVE-1999-1116

Vulnerability in runpriv in Indigo Magic System Administration subsystem of SGI IRIX 6.3 and 6.4 allows local users to gain root privileges...

CVE-1999-1243

CVE-1999-1243 affects SGI Desktop Permissions Tool on IRIX 6.0.1 and earlier. Local users can modify permissions on arbitrary files, enabling privilege escalation. The underlying root cause and exact exploit details are not provided in the supplied documents; CVSS indicates Local access with Part...

CVE-1999-1143

Vulnerability in runtime linker program rld in SGI IRIX 6.x and earlier allows local users to gain privileges via setuid and setgid programs...

CVE-1999-1120

The vulnerability CVE-1999-1120 affects SGI IRIX 6.4 and earlier where netprint trusts the PATH environment variable to locate and execute the disable program. This trust allows local users to gain privileges. Documented impact indicates local privilege escalation; exploitation details are not pr...

CVE-1999-1120

netprint in SGI IRIX 6.4 and earlier trusts the PATH environmental variable for finding and executing the disable program, which allows local users to gain privileges...

CVE-1999-1243

SGI Desktop Permissions Tool in IRIX 6.0.1 and earlier allows local users to modify permissions for arbitrary files and gain privileges...

CVE-2001-0796

SGI IRIX 6.5 through 6.5.12f and possibly earlier versions, and FreeBSD 3.0, allows remote attackers to cause a denial of service via a malformed IGMP multicast packet with a small response delay...

CVE-1999-1116

The CVE-1999-1116 entry concerns SGI IRIX 6.3 and 6.4, where the Indigo Magic System Administration subsystem’s runpriv component allows local users to gain root privileges due to an unspecified issue in its privilege handling. The vulnerability is described as enabling local privilege escalation...

CVE-2001-0796

Technical details (affected products, vulnerable components, root cause, patch info) are not publicly available in the provided Connected documents. Monitor for updates.

CVE-1999-1384

Indigo Magic System Tour in the SGI system tour package (systour) for IRIX 5.x–6.3 allows local users to gain root privileges via a Trojan horse .exitops program invoked by the inst command executed by RemoveSystemTour. The issue is localized to affected IRIX/SYSTOUR components and involves a use...

IRIX O2 video security issue

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: IRIX O2 video security issue Number: 20020103-01-I Date: January 28, 2002 SGI provides this information freely to the SGI user community for its consideration, interpretation, implementation and use. SGI recommends that this...