Irix Objectserver remote exploit

At 08:52 AM 3/29/2000 -0500, Howard wrote: Since the patches are now officially released, I feel I can finally release the details of the SGI objectserver vulnerability. This vulnerability was initailly reported to CERT and SGI Security on October 6, 1997. A beta version of patch 2849 was provide...

SGI IRIX 5.x6.x - Objectserver

SGI IRIX 5.x6.x - Objectserver // source: https://www.securityfocus.com/bid/1079/info A vulnerability exists in SGI's Objectserver service. By exploiting a vulnerability in this service, remote attackers can add root privileged accounts to the system being compromised. While a patch was made...

SGI IRIX 5.x/6.x - Objectserver

// source: https://www.securityfocus.com/bid/1079/info A vulnerability exists in SGI's Objectserver service. By exploiting a vulnerability in this service, remote attackers can add root privileged accounts to the system being compromised. While a patch was made available, and IRIX 6.2 systems wer...

SGI Security Advisory

SGI Security Advisory Title: Vulnerability in IRIX 5.3 and 6.2 objectserver Number: 20000303-01-PX Date: March 28, 2000 SGI provides this information freely to the SGI user community for its consideration, interpretation, implementation and use. SGI recommends that this information be acted upon ...

CVE-2000-0245

Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts...

irix-infosrch.cgi.txt

Hi, InfoSearch is a web-based interface to books, manpages, and relnotes, distributed by SGI. No suprises here, no parsing is done on the 'fname' variable before being passed to man2html. i.e. when cmd is 'getdoc' and db is 'man'. Also, fname is the full path to the manpage/relnote! I'm sure...

SGI InfoSearch infosrch.cgi fname Parameter Arbitrary Command Execution

The remote web server is hosting the 'infosrch.cgi' script. The installed version of this script fails to properly sanitize user- supplied input to the 'fname' variable. An attacker, exploiting this flaw, could execute arbitrary commands on the remote host subject to the privileges of the web...

CVE-2000-0207

SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters...

CVE-1999-0030

The CVE-1999-0030 entry concerns the xlock command on SGI IRIX where a buffer overflow can grant root privileges. The core information across connected sources confirms: (1) affected component: xlock on SGI IRIX; (2) vulnerability type: buffer overflow leading to root privileges; (3) root-level i...

CVE-1999-0030

root privileges via buffer overflow in xlock command on SGI IRIX systems...

CVE-1999-0270

Directory traversal vulnerability in pfdispaly.cgi program sometimes referred to as "pfdisplay" for SGI's Performer API Search Tool performertools allows remote attackers to read arbitrary files...

CVE-1999-0765

SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor...

CVE-1999-0765

The SGI IRIX midikeys vulnerability (CVE-1999-0765) resides in a setuid-root binary in /usr/sbin that allowed local users to modify root-owned files (notably /etc/passwd) via the text editor interface, enabling privilege escalation to root. The linked Red Hat/NVD entries corroborate the basic des...

SGI IRIX 6.2 - midikeyssoundplayer Local Privilege Escalation

SGI IRIX 6.2 - midikeyssoundplayer Local Privilege Escalation !/bin/sh source: https://www.securityfocus.com/bid/909/info SGI's Irix operating system ships with an X11 application called 'soundplayer' which is used to play .WAV files. It is not setuid root by itself, but can inherit root privileg...

SGI IRIX 6.2 - 'midikeys'/'soundplayer' Local Privilege Escalation

!/bin/sh source: https://www.securityfocus.com/bid/909/info SGI's Irix operating system ships with an X11 application called 'soundplayer' which is used to play .WAV files. It is not setuid root by itself, but can inherit root privileges if called by midikeys which is setuid on some old IRIX...

SCO Open Server 5.0.5 IRIX 6.2 ibX11X11 ToolkitAthena Widget Library - Local Buffer Overflow

SCO Open Server 5.0.5 IRIX 6.2 ibX11X11 ToolkitAthena Widget Library - Local Buffer Overflow // source: https://www.securityfocus.com/bid/884/info SCO Openserver and SGI IRIX 6.2 confirmed, possibly others are vulnerable to several buffer overflows in various shared libraries related to the X...

CVE-1999-0328

SGI permissions program allows local users to gain root privileges...

CVE-1999-0025

root privileges via buffer overflow in df command on SGI IRIX systems...

CVE-1999-0327

Technical details about CVE-1999-0327 are not publicly present in the provided documents. No affected products, versions, root cause, or fixes are confirmed here. Monitor the listed sources for updates.

CVE-1999-0027

CVE-1999-0027 affects SGI IRIX via a buffer overflow in the eject command that grants root privileges. The Red Hat and CVE listings confirm the same description; PT-1997-1011 notes affected SGI IRIX with no fix details available. The EUVD entry mentions Malware in sbrugna, not a direct technical ...