SGI IRIX 6.4 - xfsdump Local Privilege Escalation

SGI IRIX 6.4 - xfsdump Local Privilege Escalation source: https://www.securityfocus.com/bid/472/info The xfsdump program shipped with Irix 5.x and 6.x from SGI contains a vulnerability which could lead to root compromise. By creating a log file in /usr/tmp called bck.log, a user could create a...

SGI IRIX 6.4 - 'xfsdump' Local Privilege Escalation

source: https://www.securityfocus.com/bid/472/info The xfsdump program shipped with Irix 5.x and 6.x from SGI contains a vulnerability which could lead to root compromise. By creating a log file in /usr/tmp called bck.log, a user could create a symbolic link from this file to any file they wish t...

SGI IRIX 6.4 - inpview Local Privilege Escalation

SGI IRIX 6.4 - inpview Local Privilege Escalation source: https://www.securityfocus.com/bid/381/info The inpview utility, included by SGI in its Irix operating system, contains a vulnerability that will allow any local user to obtain root access. inpview is part of the InPerson dektop video...

SGI IRIX 6.4 - 'inpview' Local Privilege Escalation

source: https://www.securityfocus.com/bid/381/info The inpview utility, included by SGI in its Irix operating system, contains a vulnerability that will allow any local user to obtain root access. inpview is part of the InPerson dektop video conferencing package. As it needs to access a video...

SGI IRIX 6.4 - 'rmail' Local Privilege Escalation

source: https://www.securityfocus.com/bid/460/info A vulnerability exists in the rmail utility, included by SGI with it's Irix operating system. By failing to sanity check the contents of an environment variable, arbitrary commands may be executed with gid mail. rmail is used with uucp. The...

CVE-1999-0039

webdist CGI program webdist.cgi in SGI IRIX allows remote attackers to execute arbitrary commands via shell metacharacters in the distloc parameter...

SGI IRIX 6.3 - cgi-bin 'webdist.cgi' Command Execution

source: https://www.securityfocus.com/bid/374/info A vulnerability exists in the webdist.cgi program, as shipped by Silicon Grpahics Inc with the Irix operating system. This vulnerability will allow any remote user to execute arbitrary commands on an affected machine. Commands will be executed wi...

CVE-1999-1116

Vulnerability in runpriv in Indigo Magic System Administration subsystem of SGI IRIX 6.3 and 6.4 allows local users to gain root privileges...

SGI IRIX 6.2 - cgi-bin wrap

SGI IRIX 6.2 - cgi-bin wrap source: https://www.securityfocus.com/bid/373/info A vulnerability exists in the cgi-bin program 'wrap', as included with Irix 6.2 from SGI. A failure to validate input results in a vulnerability that allows any remote attacker to view the contents of any world readabl...

SGI IRIX 6.2 - cgi-bin wrap

source: https://www.securityfocus.com/bid/373/info A vulnerability exists in the cgi-bin program 'wrap', as included with Irix 6.2 from SGI. A failure to validate input results in a vulnerability that allows any remote attacker to view the contents of any world readable directory remotely. This c...

BSD/OS 2.1/3.0 / Larry Wall Perl 5.0 03 / RedHat 4.0/4.1 / SGI Freeware 1.0/2.0 SUIDPerl - Local Overflow (1)

source: https://www.securityfocus.com/bid/708/info Several buffer overflows were found in the Perl helper application 'suidperl' or 'sperl'. When this program is installed setuid root the overflows may lead to a local root compromise. !/usr/bin/perl yes, this suidperl exploit is in perl, isn't it...

SGI IRIX 6.4 - startmidi Local Privilege Escalation

SGI IRIX 6.4 - startmidi Local Privilege Escalation source: https://www.securityfocus.com/bid/469/info A vulnerability exists in the startmidi program from Silicon Graphics. This utility is included with Irix versions 5.x and 6.x with the Iris Digital Media Execution Environment. startmidi is...

CVE-1999-1120

netprint in SGI IRIX 6.4 and earlier trusts the PATH environmental variable for finding and executing the disable program, which allows local users to gain privileges...

SGI IRIX 6.4 - 'netprint' Local Privilege Escalation

source: https://www.securityfocus.com/bid/395/info A vulnerability exists in the netprint program, shipping with Irix 6.x and 5.x by Silicon Graphics. The netprint program calls the "disable" command via a system call, without specifying an explicit path. Therefore, any program in the path named...

SGI IRIX 6.4 - 'datman'/'cdman' Local Privilege Escalation

source: https://www.securityfocus.com/bid/347/info A vulnerability exists in the datman/cdman program, as included with Irix 6.2 and 5.3 from Silicon Graphics Inc. The vulnerability would allow arbitrary users to execute commands as root. The datman/cdman program will search for the existance of ...

BSD/OS 2.1 / DG/UX 4.0 / Debian 0.93 / Digital UNIX 4.0 B / FreeBSD 2.1.5 / HP-UX 10.34 / IBM AIX 4.1.5 / NetBSD 1.0/1.1 / NeXTstep 4.0 / SGI IRIX 6.3 / SunOS 4.1.4 - 'rlogin' Local Privilege Escalation

/ source: https://www.securityfocus.com/bid/242/info The SUID rlogin program is used to establish remote sessions. A buffer overflow condition has been found in the rlogin program that may allow an unauthorized user to gain root access. The overflow in particular is in the rlogin code that handle...

SGI IRIX 6.4 - 'suid_exec' Local Privilege Escalation

source: https://www.securityfocus.com/bid/467/info A vulnerability exists in the 'suidexec' utility, as shipped by SGI with it's Irix operating system, versions 5.x and 6.x. Suidexec is part of the Korn shell package, and was originally the mechanism by which ksh executed setuid shell scripts...

SGI IRIX 5.1/5.2 - 'sgihelp' Local Privilege Escalation

source: https://www.securityfocus.com/bid/468/info The sgihelp program, from SGI and included with IRIX 5.1 and 5.2, contains a vulnerability. sgihelp contains an option that allows a user to print to a command. Certain SGI utilities, including PrintStatus, printers, scanners, and a number of...

SGI IRIX 6.4 - suid_exec Local Privilege Escalation

SGI IRIX 6.4 - suidexec Local Privilege Escalation source: https://www.securityfocus.com/bid/467/info A vulnerability exists in the 'suidexec' utility, as shipped by SGI with it's Irix operating system, versions 5.x and 6.x. Suidexec is part of the Korn shell package, and was originally the...

SGI IRIX 6.4 / SGI license_oeo 3.0/3.1/3.1.1 LicenseManager - 'LICENSEMGR_FILE_ROOT' Local Privilege Escalation

source: https://www.securityfocus.com/bid/73/info Under normal operation LicenseManager1M is a program used to view and manage FLEXlm and NetLS software licenses. Unfortunately, a set of vulnerabilities has been discovered that allows LicenseManager1M to arbitrary manipulate root-owned files...