CVE-1999-0049

Csetup under IRIX allows arbitrary file creation or overwriting...

CVE-1999-0044

fsdump command in IRIX allows local users to obtain root access by modifying sensitive files...

EUVD-2003-0670

Malware in sbrugna...

EUVD-2004-0135

Malware in sbrugna...

CVE-2004-0136

The mapelf32exec function call in IRIX 6.5.20 through 6.5.24 allows local users to cause a denial of service system crash via a "corrupted binary."...

IRIX syssgi system call vulnerability and other security fixes

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: syssgi system call vulnerability and other security fixes Number: 20040601-01-P Date: June 14, 2004 Reference: SGI BUG 914420, CVE CAN-2004-0135 Reference: SGI BUG 912601, CVE CAN-2004-0136 Reference: SGI BUG 907407, CVE CAN-2004-013...

CVE-2002-0213

xkas in Xinet K-AShare 0.011.01 for IRIX allows local users to read arbitrary files via a symlink attack on the VOLICON file, which is copied to the .HSicon file in a shared directory...

IRIX nveventd vulnerability

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: nveventd vulnerability Number: 20020607-02-I Date: June 24, 2002 Reference: CAN-2002-0631 - -------------- - --- Update --- - -------------- Fixed formatting issue which caused PGP signature failure on some mailers. -...

IRIX rpc.passwd vulnerability

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: rpc.passwd vulnerability Number: 20020601-01-P Date: June 4, 2002 Reference: CAN-2002-0357 - ----------------------- - --- Issue Specifics --- - ----------------------- It's been reported that /usr/etc/rpc.passwd has a vulnerability...

Слабые разрешения в xkas под Irix (weak permissions)

Директория /var/adm/appletalk/icons открыта на запись, что позволяет создать символьный линк в директории, который будет исопльзован при копировании файла...

IRIX 5.36.x - netprint Arbitrary Shared Library Usage

IRIX 5.36.x - netprint Arbitrary Shared Library Usage // source: https://www.securityfocus.com/bid/2656/info The 'netprint' utility shipped with SGI Irix systems is used to send print jobs to print spoolers on remote hosts. It is installed setuid root by default. At the command line, 'netprint'...

CVE-2000-0893

The CVE-2000-0893 entry concerns the Distributed GL Daemon (dgld) on SGI IRIX systems. The issue is that the dgld service listening on port 5232 allows remote attackers to identify the target as SGI IRIX. This is an information-disclosure/host-identity identification risk, not a remote code execu...

SGI IRIX 6.5.4 - midikeys Root

SGI IRIX 6.5.4 - midikeys Root source: https://www.securityfocus.com/bid/262/info The setuid root "midikeys" executable can be used to edit arbitrary files via its graphical user interface. This grants malicious users root access to the system. Running the midikeys application, clicking in sounds...

CVE-1999-0049

Csetup under IRIX allows arbitrary file creation or overwriting...

SGI IRIX 6.4 - netprint Local Privilege Escalation

SGI IRIX 6.4 - netprint Local Privilege Escalation source: https://www.securityfocus.com/bid/395/info A vulnerability exists in the netprint program, shipping with Irix 6.x and 5.x by Silicon Graphics. The netprint program calls the "disable" command via a system call, without specifying an...