SGI InfoSearch 1.0,SGI IRIX 6.5.x fname Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1031/info The InfoSearch package converts man pages and other documentation into HTML web content. The search form uses infosrch.cgi which does not properly parse user input in the 'fname' variable, allowing commands to b...

SGI IRIX 6.5.22 GR_OSView Local Arbitrary File Overwrite Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13058/info A local file overwrite vulnerability affects SGI IRIX. This issue is due to a failure of the affected utility to drop privileges prior to carrying out critical functionality. An attacker may leverage this issue...

SGI IRIX <= 6.4 cgi-bin handler Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/380/info A vulnerability exists in the cgi-bin program 'handler', as included by Silicon Graphics in their Irix operating system. This vulnerability will allow a remote attacker to execute arbitrary commands on the...

SGI IRIX 6.2 SpaceWare Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/471/info The SpaceBall game, shipped with Irix 6.2 from Silicon Graphics contains a security hole which could result in the compromise of the root account. By blindly taking the contents of the $HOSTNAME variable, and not...

SGI IRIX 5.3 pkgadjust Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/419/info A vulnerability exists in the pkgadjust utility shipped with Irix 5.3 from Silicon Graphics. This vulnerability can result in the compromise of the root account. % cat getroot.c int main setuid0; chownsh,0,0;...

SGI Advanced Linux Environment 3.0,SGI IRIX <= 6.5.4,SGI UNICOS <= 10.0 6 arrayd.auth Default Configuration Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/530/exploit The SGI Array Services provide a mechanism to simplify administering and managing an array of clustered systems. The arrayd1m program is part of the arrayservices5 and is known as the array services daemon. Th...

SGI IRIX <= 6.4 inpview Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/381/info The inpview utility, included by SGI in its Irix operating system, contains a vulnerability that will allow any local user to obtain root access. inpview is part of the InPerson dektop video conferencing package...

SGI IRIX <= 6.4 rmail Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/460/info A vulnerability exists in the rmail utility, included by SGI with it's Irix operating system. By failing to sanity check the contents of an environment variable, arbitrary commands may be executed with gid mail...

Gauntlet Firewall 4.1/4.2/5.0,WebShield E-ppliance 100.0/300.0,IRIX 6.5.x Remote Buffer Overflow

No description provided by source. source: http://www.securityfocus.com/bid/1234/info A buffer overflow exists in the version of Mattel's Cyber Patrol software integrated in to Network Associates Gauntlet firewall, versions 4.1, 4.2, 5.0 and 5.5. Due to the manner in which Cyber Patrol was...

SGI IRIX 5.1/5.2 sgihelp Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/468/info The sgihelp program, from SGI and included with IRIX 5.1 and 5.2, contains a vulnerability. sgihelp contains an option that allows a user to print to a command. Certain SGI utilities, including PrintStatus,...

SGI IRIX <= 6.3 pset Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/457/info The pset utility, as shipped by SGI with Irix 5.x and 6.x through 6.3, contains a buffer overflow, which can allow any user on the system to execute arbitrary code on the machine as root. Pset is used to configur...

SGI IRIX 6.x rpc.xfsmd Remote Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5075/info Throghout the implementation of the supported remote procedure calls, the server uses the popen libc function. When popen is used, arguments passed to the RPC are included in the command string. These arguments...

SGI IRIX <= 6.3 cgi-bin webdist.cgi Vulnerabilty

No description provided by source. source: http://www.securityfocus.com/bid/374/info A vulnerability exists in the webdist.cgi program, as shipped by Silicon Grpahics Inc with the Irix operating system. This vulnerability will allow any remote user to execute arbitrary commands on an affected...

GNU groff 1.11 a,HP-UX 10.0/11.0,SGI IRIX <= 6.5.3 Malicious Manpage Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/540/info Versions of GNU groff prior to release 1.11a and standard troff contain vulnerabilities that can possibly lead to a local root compromise if the conditions are right and circumstances are somehow met. A malicious...

SGI IRIX 5.2/5.3 serial_ports Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/464/info A race condition exists in the serialports administrative program, as included by SGI in the 5.x Irix operating system. This race condition allows regular users to execute arbitrary commands as root. cat /tmp/ls...

SGI IRIX 5.3 Cadmin Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/335/info A vulnerability exists in the chost and cimport programs, as shipped with SGI's Irix 5.x operating system. chost is part of the Cadmin package. By failing to validate the real userid, these programs allow any use...

IRIX 6.5.x Performance Co-Pilot Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4642/info Performance Co-Pilot PCP is a set of services to support system-level performance monitoring developed by SGI. It has traditionally been an IRIX product, however SGI has made it open source and it is now availab...

SGI IRIX <= 6.4 netprint Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/395/info A vulnerability exists in the netprint program, shipping with Irix 6.x and 5.x by Silicon Graphics. The netprint program calls the disable command via a system call, without specifying an explicit path. Therefore...

SGI IRIX 6.4 ioconfig Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/213/info A vulnerability exists in the ioconfig program, as shipping with IRIX 6.4 S2MP from Silicon Graphics, Inc. This program is only available on Irix 6.4 for the Origin/Onyx2. Other machines running IRIX are not...

SGI IRIX 6.2 - day5notifier Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/345/info A vulnerability exists in the day5notifier program, shipped with Irix 6.2 from Silicon Graphics Inc. This program will allow any user to run any command as root. day5notifier wisely replaces a number of system...