1324 matches found
CVE-1999-1554: Undefined Security Weakness
/usr/sbin/Mail on SGI IRIX 3.3 and 3.3.1 does not properly set the group ID to the group ID of the user who started Mail, which allows local users to read the mail of other users...
CVE-1999-1501: Undefined Security Weakness
1 ipxchk and 2 ipxlink in SGI OS2 IRIX 6.3 does not properly clear the IFS environmental variable before executing system calls, which allows local users to execute arbitrary commands...
CVE-1999-1183: Undefined Security Weakness
System Manager sysmgr GUI in SGI IRIX 6.4 and 6.3 allows remote attackers to execute commands by providing a trojan horse 1 runtask or 2 runexec descriptor file, which is used to execute a System Manager Task when the user's Mailcap entry supports the x-sgi-task or x-sgi-exec type...
netprint DSO exploit
-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: netprint DSO exploit Reference: CVE CAN-2001-0485 Number: 20010701-01-P Date: July 25, 2001 SGI provides this information freely to the SGI user community for its consideration, interpretation, implementation and use. SGI recommends...
pmpost - another nice symlink follower
Hi, there is a symlink handling problem in the pcp suite from SGI. The binary pmpost will follow symlinks, if setuid root this leads to instant root compromise, as found on SuSE 7.1 I doubt that this a default SuSE package, though. Attached a simple C source to demonstrate this gcc pm.c -o pm the...
ISSalert: ISS Security Advisory: Remote Buffer Overflow Vulnerability in IRIX Embedded Support Partner Infrastructure
TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any problems! --------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security...
SGI IRIX Embedded Support Partner (ESP) service rpc.espd contains buffer overflow
Overview There is a remotely-accessible buffer overflow in SGI IRIX systems running rpc.espd that may allow remote attackers to execute arbitrary code. The Embedded Support Partner daemon rpc.espd is enabled by default on all IRIX versions since 6.5.5. Description The Embedded Support Partner...
IRIX 5.3/6.x - 'netprint' Arbitrary Shared Library Usage
// source: https://www.securityfocus.com/bid/2656/info The 'netprint' utility shipped with SGI Irix systems is used to send print jobs to print spoolers on remote hosts. It is installed setuid root by default. At the command line, 'netprint' accepts an option to specify the network type -n. This...
SGI systems may execute commands embedded in mail messages
Overview Some SGI systems produced circa 1998 allowed an intruder to send mail that would execute commands when the reader opened the message. Description On some SGI systems, Netscape is bundled with IRIX 6.3 and 6.4 and is used as the default web browser and mail reader. On these systems, the...
CVE-2000-0893
The presence of the Distributed GL Daemon dgld service on port 5232 on SGI IRIX systems allows remote attackers to identify the target host as an SGI system...
CVE-2000-0893
The CVE-2000-0893 entry concerns the Distributed GL Daemon (dgld) on SGI IRIX systems. The issue is that the dgld service listening on port 5232 allows remote attackers to identify the target as SGI IRIX. This is an information-disclosure/host-identity identification risk, not a remote code execu...
CVE-2000-0893
The presence of the Distributed GL Daemon dgld service on port 5232 on SGI IRIX systems allows remote attackers to identify the target host as an SGI system...
CVE-2000-0893: Undefined Security Weakness
The presence of the Distributed GL Daemon dgld service on port 5232 on SGI IRIX systems allows remote attackers to identify the target host as an SGI system...
SGI IRIX df buffer overflow in directory argument
Overview Description The df program is used to display statistics about the amount of used and free disc space on a set of mounted file systems. Alternately, it can be used to check on the amount of space available on unmounted block devices which may be specified by some path. Due to insufficien...
InPerson Vulnerabilities
SGI Security Advisory Title: InPerson Vulnerabilities Reference: CAN-2000-0799 Number: 20001101-01-I Date: November 20, 2000 SGI provides this information freely to the SGI user community for its consideration, interpretation, implementation and use. SGI recommends that this information be acted...
CVE-2000-0704
Buffer overflow in SGI Omron WorldView Wnn allows remote attackers to execute arbitrary commands via long JSOPEN, JSMKDIR, or JSFILEINFO commands...
CVE-2000-0799
inpview in InPerson in SGI IRIX 5.3 through IRIX 6.5.10 allows local users to gain privileges via a symlink attack on the .ilmpAAA temporary file...
CVE-2000-0533
Vulnerability in cvconnect in SGI IRIX WorkShop allows local users to overwrite arbitrary files...