12 matches found
CVE-1999-0765
SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor...
EUVD-1999-0746
Malware in sbrugna...
SGI IRIX <= 6.5.4 midikeys Root Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/262/info The setuid root midikeys executable can be used to edit arbitrary files via its graphical user interface. This grants malicious users root access to the system. Running the midikeys application, clicking in sound...
SGI IRIX 6.2 midikeys/soundplayer Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/909/info SGI's Irix operating system ships with an X11 application called 'soundplayer' which is used to play .WAV files. It is not setuid root by itself, but can inherit root priviliges if called by midikeys which is...
CVE-1999-0765
SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor...
CVE-1999-0765
The SGI IRIX midikeys vulnerability (CVE-1999-0765) resides in a setuid-root binary in /usr/sbin that allowed local users to modify root-owned files (notably /etc/passwd) via the text editor interface, enabling privilege escalation to root. The linked Red Hat/NVD entries corroborate the basic des...
SGI IRIX 6.2 - 'midikeys'/'soundplayer' Local Privilege Escalation
!/bin/sh source: https://www.securityfocus.com/bid/909/info SGI's Irix operating system ships with an X11 application called 'soundplayer' which is used to play .WAV files. It is not setuid root by itself, but can inherit root privileges if called by midikeys which is setuid on some old IRIX...
SGI IRIX 6.2 - midikeyssoundplayer Local Privilege Escalation
SGI IRIX 6.2 - midikeyssoundplayer Local Privilege Escalation !/bin/sh source: https://www.securityfocus.com/bid/909/info SGI's Irix operating system ships with an X11 application called 'soundplayer' which is used to play .WAV files. It is not setuid root by itself, but can inherit root privileg...
irix.midikeys.txt
Date: Wed, 19 May 1999 11:25:59 -0400 From: Larry W. Cashdollar To: [email protected] Subject: IRIX midikeys root exploit. Aleph1, Please forgive me if this has already been on this list. I searched geek-girl with no luck. I have been auditing our IRIX boxes and found what I believe to be a ne...
CVE-1999-0765
SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor...
SGI IRIX 6.5.4 - midikeys Root
SGI IRIX 6.5.4 - midikeys Root source: https://www.securityfocus.com/bid/262/info The setuid root "midikeys" executable can be used to edit arbitrary files via its graphical user interface. This grants malicious users root access to the system. Running the midikeys application, clicking in sounds...
SGI IRIX 6.5.4 - midikeys Root
source: https://www.securityfocus.com/bid/262/info The setuid root "midikeys" executable can be used to edit arbitrary files via its graphical user interface. This grants malicious users root access to the system. Running the midikeys application, clicking in sounds, and then songs will bring up ...