CVE-1999-0039

webdist CGI program webdist.cgi in SGI IRIX allows remote attackers to execute arbitrary commands via shell metacharacters in the distloc parameter...

CVE-1999-0026

root privileges via buffer overflow in pset command on SGI IRIX systems...

CVE-1999-0149

The wrap CGI program in IRIX allows remote attackers to view arbitrary directory listings via a .. dot dot attack...

CVE-1999-0059

IRIX fam service allows an attacker to obtain a list of all files on the server...

CVE-1999-0148

The handler CGI program in IRIX allows arbitrary command execution...

CVE-1999-0108

The connected documents corroborate CVE-1999-0108: a local buffer overflow in the IRIX printers program can grant root access to local users. The vulnerability arises in the printers utility on IRIX; details beyond the existence of a buffer overflow and local privilege escalation are not provided...

CVE-1999-0126

CVE-1999-0126 describes a buffer overflow in SGI IRIX affecting the xterm and Xaw components, enabling local privilege escalation to root. The root cause is a memory overflow in these X-related tools, leading to compromise of the running system with root access . Public details in the connected d...

CVE-1999-0039

CVE-1999-0039 refers to the SGI IRIX webdist CGI (webdist.cgi). The vulnerability allows remote attackers to execute arbitrary commands by supplying shell metacharacters in the distloc parameter via the CGI, resulting in arbitrary command execution with the web server user privileges. Multiple so...

CVE-1999-0126

SGI IRIX buffer overflow in xterm and Xaw allows root access...

CVE-1999-0025

The vulnerability CVE-1999-0025 affects SGI IRIX df: a buffer/stack overflow caused by insufficient bounds checking on directory or block-device arguments allows a non-privileged process to trigger code execution with root privileges because df is setuid root. CERT/Red Hat ENISA notes describe lo...

CVE-1999-0125

CVE-1999-0125 describes a local buffer overflow in the SGI IRIX mailx program. The vulnerability affects the mailx component of SGI IRIX; the root cause is a buffer overflow that can impact confidentiality, integrity and availability (partial impacts) when an attacker with local access and no aut...

CVE-1999-0148

The IRIX environment is affected by CVE-1999-0148 due to the installed /cgi-bin/handler CGI, which has a well-known flaw that allows arbitrary command execution. The vulnerability can execute commands with the privileges of the HTTP daemon (root or nobody). Documents consistently describe it as r...

CVE-1999-0314

CVE-1999-0314 affects SGI IRIX 6.4 S2MP for Origin/Onyx2, where the ioconfig component is vulnerable to path traversal via relative pathnames. This local privilege escalation allows a local user to gain root access. The available documents identify the affected platform and the root-level impact ...

CVE-1999-0313

diskbandwidth on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames...

DIGITAL UNIX 4.0 d/f / AIX 4.3.2 / CDE 2.1 / IRIX 6.5.14 / Solaris 7.0 / SunOS 4.1.4 - Local Buffer Overflow

/ source: https://www.securityfocus.com/bid/641/info TRU64/DIGITAL UNIX 4.0 d/f,AIX Somehow the overflow is very sensitive to caching of the stack. To see that it really does work, run it in a debugger and set a break point in ttopen when that is reached, set a breakpoint in sscanf and continue...

DIGITAL UNIX 4.0 d/e/f / AIX 4.3.2 / CDE 2.1 / IRIX 6.5.14 / Solaris 7.0 - Local Buffer Overflow

/ source: https://www.securityfocus.com/bid/635/info TRU64/DIGITAL UNIX 4.0 d/e/f,AIX include include include define BUFLEN 998 char exploitcode = "\xeb\x18\x5e\x33\xc0\x33\xdb\xb3\x08\x2b\xf3\x88\x06\x50\x50\xb0" "\x8d\x9a\xff\xff\xff\xff\x07\xee\xeb\x05\xe8\xe3\xff\xff\xff"...

DIGITAL UNIX 4.0 def AIX 4.3.2 CDE 2.1 IRIX 6.5.14 Solaris 7.0 - Local Buffer Overflow

DIGITAL UNIX 4.0 def AIX 4.3.2 CDE 2.1 IRIX 6.5.14 Solaris 7.0 - Local Buffer Overflow / source: https://www.securityfocus.com/bid/635/info TRU64/DIGITAL UNIX 4.0 d/e/f,AIX include include include define BUFLEN 998 char exploitcode =...

irix.midikeys.txt

Date: Wed, 19 May 1999 11:25:59 -0400 From: Larry W. Cashdollar To: [email protected] Subject: IRIX midikeys root exploit. Aleph1, Please forgive me if this has already been on this list. I searched geek-girl with no luck. I have been auditing our IRIX boxes and found what I believe to be a ne...

irix-fcagent-DoS.txt

IRIX's fcagent daemon is vulnerable to a Denial of Service attack. IRIX's versions 6.4, 6.5 and 6.5.2 fcagent daemon is an RPC based daemon that services requests about status or configuration of a FibreVault enclosure a very fast fiber optics installation of Disks. Fcagent is vulnerable to a...

irixat.txt

Date: Fri, 3 Jul 1998 22:14:14 +0200 From: "J.A. Gutierrez" Subject: more about 'at' I've tried the trick from NetBSD Security Advisory 1998-004 on an IRIX 6.2 host, and it seems it works too. $ at -f /etc/shadow now + 1 minute - shadow is mailed to user: 'at' is: f 23947 91...