netprint DSO exploit

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: netprint DSO exploit Reference: CVE CAN-2001-0485 Number: 20010701-01-P Date: July 25, 2001 SGI provides this information freely to the SGI user community for its consideration, interpretation, implementation and use. SGI recommends...

pmpost - another nice symlink follower

Hi, there is a symlink handling problem in the pcp suite from SGI. The binary pmpost will follow symlinks, if setuid root this leads to instant root compromise, as found on SuSE 7.1 I doubt that this a default SuSE package, though. Attached a simple C source to demonstrate this gcc pm.c -o pm the...

ISSalert: ISS Security Advisory: Remote Buffer Overflow Vulnerability in IRIX Embedded Support Partner Infrastructure

TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any problems! --------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security...

SGI IRIX Embedded Support Partner (ESP) service rpc.espd contains buffer overflow

Overview There is a remotely-accessible buffer overflow in SGI IRIX systems running rpc.espd that may allow remote attackers to execute arbitrary code. The Embedded Support Partner daemon rpc.espd is enabled by default on all IRIX versions since 6.5.5. Description The Embedded Support Partner...

IRIX 5.3/6.x - 'netprint' Arbitrary Shared Library Usage

// source: https://www.securityfocus.com/bid/2656/info The 'netprint' utility shipped with SGI Irix systems is used to send print jobs to print spoolers on remote hosts. It is installed setuid root by default. At the command line, 'netprint' accepts an option to specify the network type -n. This...

SGI systems may execute commands embedded in mail messages

Overview Some SGI systems produced circa 1998 allowed an intruder to send mail that would execute commands when the reader opened the message. Description On some SGI systems, Netscape is bundled with IRIX 6.3 and 6.4 and is used as the default web browser and mail reader. On these systems, the...

CVE-2000-0893

The presence of the Distributed GL Daemon dgld service on port 5232 on SGI IRIX systems allows remote attackers to identify the target host as an SGI system...

CVE-2000-0893

The CVE-2000-0893 entry concerns the Distributed GL Daemon (dgld) on SGI IRIX systems. The issue is that the dgld service listening on port 5232 allows remote attackers to identify the target as SGI IRIX. This is an information-disclosure/host-identity identification risk, not a remote code execu...

CVE-2000-0893

The presence of the Distributed GL Daemon dgld service on port 5232 on SGI IRIX systems allows remote attackers to identify the target host as an SGI system...

SGI IRIX df buffer overflow in directory argument

Overview Description The df program is used to display statistics about the amount of used and free disc space on a set of mounted file systems. Alternately, it can be used to check on the amount of space available on unmounted block devices which may be specified by some path. Due to insufficien...

InPerson Vulnerabilities

SGI Security Advisory Title: InPerson Vulnerabilities Reference: CAN-2000-0799 Number: 20001101-01-I Date: November 20, 2000 SGI provides this information freely to the SGI user community for its consideration, interpretation, implementation and use. SGI recommends that this information be acted...

CVE-2000-0704

Buffer overflow in SGI Omron WorldView Wnn allows remote attackers to execute arbitrary commands via long JSOPEN, JSMKDIR, or JSFILEINFO commands...

CVE-2000-0799

inpview in InPerson in SGI IRIX 5.3 through IRIX 6.5.10 allows local users to gain privileges via a symlink attack on the .ilmpAAA temporary file...

CVE-2000-0533

Technical details about CVE-2000-0533 (SGI IRIX WorkShop cvconnect) are not publicly provided in the supplied documents. Monitor for updates from official sources.

CVE-2000-0533

Vulnerability in cvconnect in SGI IRIX WorkShop allows local users to overwrite arbitrary files...

CVE-2000-0704

CVE-2000-0704 affects SGI WorldView (Omron Wnn) on IRIX. A root-level buffer overflow in the WorldView WNN server can be triggered remotely by sending oversized JS_OPEN, JS_MKDIR, or JS_FILE_INFO commands, allowing arbitrary commands execution with root privileges on vulnerable installations wher...

CVE-2000-0704

Buffer overflow in SGI Omron WorldView Wnn allows remote attackers to execute arbitrary commands via long JSOPEN, JSMKDIR, or JSFILEINFO commands...

IRIX telnetd vulnerability

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: IRIX telnetd vulnerability Number: 20000801-01-P Date: September 6, 2000 SGI provides this information freely to the SGI user community for its consideration, interpretation, implementation and use. SGI recommends that this informati...

IRIX telnetd vulnerability

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: IRIX telnetd vulnerability Number: 20000801-01-A Date: August 14, 2000 SGI provides this information freely to the SGI user community for its consideration, interpretation, implementation and use. SGI recommends that this information...

CVE-2000-0578

SGI MIPSPro compilers C, C++, F77 and F90 generate temporary files in /tmp with predictable file names, which could allow local users to insert malicious contents into these files as they are being compiled by another user...