SGI IRIX 6.4 - 'datman'/'cdman' Local Privilege Escalation

source: https://www.securityfocus.com/bid/347/info A vulnerability exists in the datman/cdman program, as included with Irix 6.2 and 5.3 from Silicon Graphics Inc. The vulnerability would allow arbitrary users to execute commands as root. The datman/cdman program will search for the existance of ...

BSD/OS 2.1 / DG/UX 4.0 / Debian 0.93 / Digital UNIX 4.0 B / FreeBSD 2.1.5 / HP-UX 10.34 / IBM AIX 4.1.5 / NetBSD 1.0/1.1 / NeXTstep 4.0 / SGI IRIX 6.3 / SunOS 4.1.4 - 'rlogin' Local Privilege Escalation

/ source: https://www.securityfocus.com/bid/242/info The SUID rlogin program is used to establish remote sessions. A buffer overflow condition has been found in the rlogin program that may allow an unauthorized user to gain root access. The overflow in particular is in the rlogin code that handle...

SGI IRIX 5.1/5.2 - 'sgihelp' Local Privilege Escalation

source: https://www.securityfocus.com/bid/468/info The sgihelp program, from SGI and included with IRIX 5.1 and 5.2, contains a vulnerability. sgihelp contains an option that allows a user to print to a command. Certain SGI utilities, including PrintStatus, printers, scanners, and a number of...

SGI IRIX 6.4 - 'suid_exec' Local Privilege Escalation

source: https://www.securityfocus.com/bid/467/info A vulnerability exists in the 'suidexec' utility, as shipped by SGI with it's Irix operating system, versions 5.x and 6.x. Suidexec is part of the Korn shell package, and was originally the mechanism by which ksh executed setuid shell scripts...

SGI IRIX 6.4 - suid_exec Local Privilege Escalation

SGI IRIX 6.4 - suidexec Local Privilege Escalation source: https://www.securityfocus.com/bid/467/info A vulnerability exists in the 'suidexec' utility, as shipped by SGI with it's Irix operating system, versions 5.x and 6.x. Suidexec is part of the Korn shell package, and was originally the...

SGI IRIX 6.4 / SGI license_oeo 3.0/3.1/3.1.1 LicenseManager - 'LICENSEMGR_FILE_ROOT' Local Privilege Escalation

source: https://www.securityfocus.com/bid/73/info Under normal operation LicenseManager1M is a program used to view and manage FLEXlm and NetLS software licenses. Unfortunately, a set of vulnerabilities has been discovered that allows LicenseManager1M to arbitrary manipulate root-owned files...

SGI IRIX 6.4 SGI license_oeo 3.03.13.1.1 LicenseManager - LICENSEMGR_FILE_ROOT Local Privilege Escalation

SGI IRIX 6.4 SGI licenseoeo 3.03.13.1.1 LicenseManager - LICENSEMGRFILEROOT Local Privilege Escalation source: https://www.securityfocus.com/bid/73/info Under normal operation LicenseManager1M is a program used to view and manage FLEXlm and NetLS software licenses. Unfortunately, a set of...

SGI IRIX 6.2 - 'cdplayer' Local Privilege Escalation

source: https://www.securityfocus.com/bid/333/info A vulnerability exists in the /usr/bin/X11/cdplayer application as shipped with SGI's IRIX operating system. By failing to shed root privileges, and creating arbitrary directories as root, cdplayer allows arbitrary users to gain root on the syste...

SGI IRIX 6.2 - cdplayer Local Privilege Escalation

SGI IRIX 6.2 - cdplayer Local Privilege Escalation source: https://www.securityfocus.com/bid/333/info A vulnerability exists in the /usr/bin/X11/cdplayer application as shipped with SGI's IRIX operating system. By failing to shed root privileges, and creating arbitrary directories as root, cdplay...

CVE-1999-1384

Indigo Magic System Tour in the SGI system tour package systour for IRIX 5.x through 6.3 allows local users to gain root privileges via a Trojan horse .exitops program, which is called by the inst command that is executed by the RemoveSystemTour program...

SGI IRIX 6.3 - 'Systour' / 'OutOfBox' Local Privilege Escalation

source: https://www.securityfocus.com/bid/470/info A vulnerability exists in both the Systour and OutOfBox susbsystems included with new installs of IRIX 5.x and 6.x from SGI. This vulnerability allows users on the system to run arbitrary commands as root. $ rbase=$HOME; export rbase $ mkdir -p...

SGI IRIX 6.3 - Systour OutOfBox Local Privilege Escalation

SGI IRIX 6.3 - Systour OutOfBox Local Privilege Escalation source: https://www.securityfocus.com/bid/470/info A vulnerability exists in both the Systour and OutOfBox susbsystems included with new installs of IRIX 5.x and 6.x from SGI. This vulnerability allows users on the system to run arbitrary...

SGI IRIX 5.3 - 'Cadmin' Local Privilege Escalation

source: https://www.securityfocus.com/bid/335/info A vulnerability exists in the chost and cimport programs, as shipped with SGI's Irix 5.x operating system. chost is part of the Cadmin package. By failing to validate the real userid, these programs allow any user to edit protected files, such as...

SGI IRIX 5.3 - Cadmin Local Privilege Escalation

SGI IRIX 5.3 - Cadmin Local Privilege Escalation source: https://www.securityfocus.com/bid/335/info A vulnerability exists in the chost and cimport programs, as shipped with SGI's Irix 5.x operating system. chost is part of the Cadmin package. By failing to validate the real userid, these program...

SGI IRIX 5.3/6.2 / SGI license_oeo 1.0 LicenseManager - 'NETLS_LICENSE_FILE' Local Privilege Escalation

source: https://www.securityfocus.com/bid/72/info Under normal operation LicenseManager1M is a program used to view and manage FLEXlm and NetLS software licenses. Unfortunately, a set of vulnerabilities has been discovered that allows LicenseManager1M to overwrite root-owned files allowing root...

SGI IRIX 5.36.2 SGI license_oeo 1.0 LicenseManager - NETLS_LICENSE_FILE Local Privilege Escalation

SGI IRIX 5.36.2 SGI licenseoeo 1.0 LicenseManager - NETLSLICENSEFILE Local Privilege Escalation source: https://www.securityfocus.com/bid/72/info Under normal operation LicenseManager1M is a program used to view and manage FLEXlm and NetLS software licenses. Unfortunately, a set of vulnerabilitie...

CVE-1999-1319

Vulnerability in object server program in SGI IRIX 5.2 through 6.1 allows remote attackers to gain root privileges in certain configurations...

CVE-1999-1243

SGI Desktop Permissions Tool in IRIX 6.0.1 and earlier allows local users to modify permissions for arbitrary files and gain privileges...

IRIX 5.2/6.0 - Permissions File Manipulation

source: https://www.securityfocus.com/bid/1751/info The IRIX's /usr/lib/desktop/permissions tool is a suid and sgid root applications normally used by users to modify permissions of their files and files they are privileged for. A vulnerability in the permissions tool allows local malicious users...

IRIX 5.26.0 - Permissions File Manipulation

IRIX 5.26.0 - Permissions File Manipulation source: https://www.securityfocus.com/bid/1751/info The IRIX's /usr/lib/desktop/permissions tool is a suid and sgid root applications normally used by users to modify permissions of their files and files they are privileged for. A vulnerability in the...