936 matches found
CVE-2001-0331
CVE-2001-0331 describes a buffer overflow in SGI IRIX Embedded Support Partner (ESP) daemon rpc.espd, affecting IRIX 6.5.8 and earlier. The vulnerability allows remote attackers to execute arbitrary commands with superuser privileges, with the ESP daemon enabled by default on IRIX installations a...
CVE-1999-1039
CVE-1999-1039 affects IRIX 6.4, specifically the diskalign and diskperf code paths patched by IRIX 6.4 patches 2291 and 2848. A local user could create root-owned files, leading to a root compromise. The connected records confirm affected components and root-privelege impact; no exploit details a...
CVE-1999-1219
Vulnerability in sgihelp in the SGI help system and print manager in IRIX 5.2 and earlier allows local users to gain root privileges, possibly through the clogin command...
CVE-1999-1183
Technical details for CVE-1999-1183 are not publicly available in the provided documents. The initial description contains basic summary only. Monitor for updates from official sources for affected products, impact scope, and remediation.
CVE-1999-1554
SGI IRIX issue CVE-1999-1554: The /usr/sbin/Mail program does not properly set the group ID to the start-user’s group, enabling local users to read others’ mail on SGI IRIX 3.3 and 3.3.1. Root cause: group ID handling in Mail is incorrect. Impact: local privilege/ownership breach by reading mail ...
CVE-1999-1022
CVE-1999-1022 affects the IRIX serial_ports administrative program on IRIX 4.x/5.x. It trusts the user’s PATH to locate ls, enabling a local user to gain root privileges with a Trojan horse ls. No remediation details are provided in the supplied documents.
CVE-1999-1319
Vulnerability in object server program in SGI IRIX 5.2 through 6.1 allows remote attackers to gain root privileges in certain configurations...
CVE-1999-1039
Vulnerability in 1 diskalign and 2 diskperf in IRIX 6.4 patches 2291 and 2848 allow a local user to create root-owned files leading to a root compromise...
CVE-1999-1398
The CVE-1999-1398 vulnerability affects the xfsdump utility on SGI IRIX and could allow local users to gain root privileges via the bck.log file, potentially through a symlink attack. The provided documents do not specify exact affected IRIX versions, exploit details, or a patch/remediation. Expl...
CVE-1999-1040
The CVE-1999-1040 entry affects NetWare Client 1.0 on IRIX 6.3/6.4, where local users can gain root rights by manipulating an IFS environment variable in the components ipxchk and ipxlink. The vulnerability is described as a local privilege escalation, but the provided documents do not specify af...
CVE-1999-1232
The CVE-1999-1232 entry concerns SGI IRIX 6.2, specifically the day5datacopier component. The vulnerability arises from an untrusted search path: a local user can influence PATH to point to a malicious cp program, enabling arbitrary command execution. Impact is local confidentiality, integrity, a...
CVE-1999-1040
Vulnerabilities in 1 ipxchk and 2 ipxlink in NetWare Client 1.0 on IRIX 6.3 and 6.4 allows local users to gain root access via a modified IFS environmental variable...
CVE-1999-1461
The CVE-1999-1461 issue affects IRIX 5.3–6.5.10 where inpview trusts the PATH env var to locate and execute ttsession. A local user can modify PATH to point to a Trojan horse ttsession, enabling privilege escalation to root. The root cause is PATH-based resolution of ttsession, leading to arbitra...
CVE-1999-1183
System Manager sysmgr GUI in SGI IRIX 6.4 and 6.3 allows remote attackers to execute commands by providing a trojan horse 1 runtask or 2 runexec descriptor file, which is used to execute a System Manager Task when the user's Mailcap entry supports the x-sgi-task or x-sgi-exec type...
CVE-1999-1399
spaceball program in SpaceWare 7.3 v1.0 in IRIX 6.2 allows local users to gain root privileges by setting the HOSTNAME environmental variable to contain the commands to be executed...
CVE-1999-1232
Untrusted search path vulnerability in day5datacopier in SGI IRIX 6.2 allows local users to execute arbitrary commands via a modified PATH environment variable that points to a malicious cp program...
CVE-1999-1286
The CVE-1999-1286 vulnerability affects SGI IRIX 6.2 and earlier with the addnetpr component. It allows local users to modify arbitrary files and potentially gain root access through a symlink attack on a temporary file. The description and sources provided corroborate a local-privilege-elevation...
CVE-1999-1485
nsd in IRIX 6.5 through 6.5.2 exports a virtual filesystem on a UDP port, which allows remote attackers to view files and cause a possible denial of service by mounting the nsd virtual file system...
CVE-1999-1022
serialports administrative program in IRIX 4.x and 5.x trusts the user's PATH environmental variable to find and execute the ls program, which allows local users to gain root privileges via a Trojan horse ls program...