Gauntlet Firewall 4.1/4.2/5.0,WebShield E-ppliance 100.0/300.0,IRIX 6.5.x Remote Buffer Overflow

No description provided by source. source: http://www.securityfocus.com/bid/1234/info A buffer overflow exists in the version of Mattel's Cyber Patrol software integrated in to Network Associates Gauntlet firewall, versions 4.1, 4.2, 5.0 and 5.5. Due to the manner in which Cyber Patrol was...

SGI IRIX 5.3 Cadmin Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/335/info A vulnerability exists in the chost and cimport programs, as shipped with SGI's Irix 5.x operating system. chost is part of the Cadmin package. By failing to validate the real userid, these programs allow any use...

IRIX 6.5.x Performance Co-Pilot Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4642/info Performance Co-Pilot PCP is a set of services to support system-level performance monitoring developed by SGI. It has traditionally been an IRIX product, however SGI has made it open source and it is now availab...

SGI IRIX <= 6.5.28 (runpriv) Design Error Vulnerability

No description provided by source. !/bin/sh Advisory: http://www.idefense.com/intelligence/vulnerabilities/display.php?id=312 /usr/sysadm/bin/runpriv mountfs -s test -d / -o | ksh -c 'echo r00t::0:0:r00t:/tmp:/bin/sh /etc/passwd' su r00t -c chown root:sys /tmp/passwd123 ; mv /tmp/passwd123...

SGI IRIX <= 6.4 datman/cdman Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/347/info A vulnerability exists in the datman/cdman program, as included with Irix 6.2 and 5.3 from Silicon Graphics Inc. The vulnerability would allow arbitrary users to execute commands as root. The datman/cdman program...

SGI IRIX <= 6.2 cdplayer Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/333/info A vulnerability exists in the /usr/bin/X11/cdplayer application as shipped with SGI's IRIX operating system. By failing to shed root privileges, and creating arbitrary directories as root, cdplayer allows arbitra...

SGI IRIX <= 6.3 pset Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/457/info The pset utility, as shipped by SGI with Irix 5.x and 6.x through 6.3, contains a buffer overflow, which can allow any user on the system to execute arbitrary code on the machine as root. Pset is used to configur...

SGI IRIX 5.1/5.2 sgihelp Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/468/info The sgihelp program, from SGI and included with IRIX 5.1 and 5.2, contains a vulnerability. sgihelp contains an option that allows a user to print to a command. Certain SGI utilities, including PrintStatus,...

SGI Performance Co-Pilot 2.1.x/2.2 pmpost Symbolic Link Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2887/info Performance Co-Pilot PCP is a set of services to support system-level performance monitoring developed by SGI. It has traditionally been an IRIX product, however SGI has made it open source and it is now availab...

SGI IRIX <= 6.2 eject Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/351/info A vulnerability exists in the eject program shipped with Irix 6.2 from Silicon Graphics. By supplying a long argument to the eject program, it is possible to overwrite the return address on the stack, and execute...

IRIX 5.3/6.x 'netprint' Arbitrary Shared Library Usage Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2656/info The 'netprint' utility shipped with SGI Irix systems is used to send print jobs to print spoolers on remote hosts. It is installed setuid root by default. At the command line, 'netprint' accepts an option to...

SGI IRIX <= 6.2 /usr/lib/netaddpr Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/330/info SGI's IRIX 5.x and 6.x operating system include a utility called /usr/lib/netaddpr. This program can be used by privledged users to add network printing devices to the system. A race condition exists in this...

SGI IRIX <= 6.4 login Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/392/info A buffer overflow exists in the /bin/login program supplied by Silicon Graphics, as part of their Irix operating system. By supplying a carefullly crafted, log buffer to the -h option of login, a local user can...

SGI IRIX 6.2 SpaceWare Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/471/info The SpaceBall game, shipped with Irix 6.2 from Silicon Graphics contains a security hole which could result in the compromise of the root account. By blindly taking the contents of the $HOSTNAME variable, and not...

SGI IRIX <= 6.4 suid_exec Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/467/info A vulnerability exists in the 'suidexec' utility, as shipped by SGI with it's Irix operating system, versions 5.x and 6.x. Suidexec is part of the Korn shell package, and was originally the mechanism by which ksh...

SGI IRIX 6.5.22 GR_OSView Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13057/info grosview is reported prone to an information disclosure vulnerability. This issue can help a local attacker to obtain sensitive information such as exposing an administrator's password hash and carrying out oth...

NetBSD <= 1.3.2,SGI IRIX <= 6.5.1 at(1) Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/331/info A vulnerability exists in NetBSD version 1.3.2 and lower, and Silicon Graphics Inc's IRIX versions 6.2, 6.3, 6.4, 6.5 and 6.5.1. The at1 program can be supplied with a -f flag, and an error is access validation c...

SGI IRIX <= 6.4 inpview Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/381/info The inpview utility, included by SGI in its Irix operating system, contains a vulnerability that will allow any local user to obtain root access. inpview is part of the InPerson dektop video conferencing package...

SGI IRIX 5.3 pkgadjust Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/419/info A vulnerability exists in the pkgadjust utility shipped with Irix 5.3 from Silicon Graphics. This vulnerability can result in the compromise of the root account. % cat getroot.c int main setuid0; chownsh,0,0;...

SGI IRIX 5.2/5.3 serial_ports Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/464/info A race condition exists in the serialports administrative program, as included by SGI in the 5.x Irix operating system. This race condition allows regular users to execute arbitrary commands as root. cat /tmp/ls...