CVE-2003-0572

The CVE-2003-0572 issue concerns the SGI IRIX Name Service Daemon (nsd). The SGI advisory notes multiple nsd vulnerabilities in IRIX 6.5.x up to 6.5.20f (and possibly earlier), with the specific CVECAN-2003-0572 issue described as dynamic maps in nsd that can be made to consume memory, leading to...

CVE-2003-0573

The DNS callbacks in nsd in SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, do not perform sufficient sanity checking, with unknown impact...

CVE-2003-0177

The CVE-2003-0177 entry concerns SGI IRIX 6.5.x (through 6.5.20f and possibly earlier) where /etc/group does not honor minus ('-') entries, causing subsequent group membership lines to be processed incorrectly. The issue is tied to the IRIX Name Service Daemon (nsd) and affects IRIX 6.5.x systems...

CVE-2003-0574

Unknown vulnerability in SGI IRIX 6.5.x through 6.5.20, and possibly earlier versions, allows local users to cause a core dump in scheme and possibly gain privileges via certain environment variables, a different vulnerability than CVE-2001-0797 and CVE-1999-0028...

CVE-2003-0574

Unknown vulnerability in SGI IRIX 6.5.x through 6.5.20, and possibly earlier versions, allows local users to cause a core dump in scheme and possibly gain privileges via certain environment variables, a different vulnerability than CVE-2001-0797 and CVE-1999-0028...

CVE-2003-0177

SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, does not follow "-" entries in the /etc/group file, which may cause subsequent group membership entries to be processed inadvertently...

CVE-2003-0572

Unknown vulnerability in nsd in SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, allows attackers to cause a denial of service memory consumption...

CVE-2003-0573

CVE-2003-0573 relates to SGI IRIX’s Name Service Daemon (nsd). The issue is that DNS callbacks in nsd on IRIX 6.5.x (through 6.5.20f and possibly earlier) do not perform sufficient sanity checking. The impact is not explicitly stated in the CVE description, and exploitation details are not provid...

Checkpoint/Restart Vulnerability on IRIX

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : Checkpoint/Restart Vulnerability Number : 20030802-01-P Date : August 14, 2003 Reference : CVE CAN-2003-0679 Reference : SGI BUG 894920 Fixed in : IRIX 6.5.22 or patches 5264 through 5269 SGI provides this information freely to the...

IRISconsole allows login to the "iceadmin" account with incorrect password

Overview SGI IRIS console contains a vulnerability which may allow a local attacker to gain elevated privileges. Description SGI describes IRISconsole as a "central control point that manages and monitors servers and logs their activity." A vulnerability in IRISconsole may allow a local attacker ...

CVE-2003-0576

CVE-2003-0576 is a remote DoS in SGI IRIX 6.5.x via the NFS daemon (nfsd) stemming from XDR decoding errors that cause kernel panics. The SGI advisory (CAN-2003-0576) states IRIX 6.5.19f and earlier are affected and recommends upgrading to IRIX 6.5.20 or applying the listed patches. The connected...

CVE-2003-0679

Unknown vulnerability in the libcpr library for the Checkpoint/Restart cpr system on SGI IRIX 6.5.21f and earlier allows local users to truncate or overwrite certain files...

CVE-2003-0576

Unknown vulnerability in the NFS daemon nfsd in SGI IRIX 6.5.19f and earlier allows remote attackers to cause a denial of service kernel panic via certain packets that cause XDR decoding errors, a different vulnerability than CVE-2003-0619...

CVE-2003-0679

CVE-2003-0679 concerns a vulnerability in the libcpr library used by SGI’s Checkpoint/Restart (cpr) on IRIX 6.5.x. The issue, reported as a local vulnerability, permits users to truncate or overwrite certain files for which they lack permissions. The SGI Security Advisory 20030802-01-P explains t...

Denial of Service Vulnerability in NFS on IRIX

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : Denial of Service Vulnerability in NFS XDR decoding Number : 20030801-01-P Date : August 13, 2003 Reference: CVE 2003-0576 Reference: SGI BUG 894659 Fixed in : IRIX 6.5.20 or patches 5229, 5230, 5240, 5241, 5227, 5228 SGI provides...

CVE-2003-0575

Heap-based buffer overflow in the name services daemon nsd in SGI IRIX 6.5.x through 6.5.21f, and possibly earlier versions, allows attackers to gain root privileges via the AUTHUNIX gid list...

CVE-2003-0575

The IRIX nsd (name services daemon) vulnerability CVE-2003-0575 is a heap-based buffer overflow in the RPC AUTH_UNIX handling of nsd on IRIX 6.5.x (through 6.5.21f, possibly earlier). An attacker could trigger a buffer overflow by sending a crafted UDP AUTH_UNIX packet, potentially gaining root a...

IRIX nsd server and modules mishandle AUTH_UNIX gid list

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : IRIX nsd server and modules mishandle AUTHUNIX gid list Number : 20030704-01-P Date : July 29, 2003 Reference : CVE CAN-2003-0575 Reference : SGI BUG 873591 Fixed in : IRIX 6.5.22 or patches 5189-5197 SGI provides this information...

SGI IRIX name services daemon (nsd) and modules mishandle AUTH_UNIX gid list

Overview A remotely exploitable vulnerability has been discoved in the "nsd" service for SGI IRIX systems. A remote attacker may be able to gain root access to the vulnerable system. Description A remotely exploitable heap overflow vulnerability has been discovered in a function for the RPC...

Login Vulnerabilities on IRIX

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : Login Vulnerabilities Number : 20030702-01-P Date : July 16, 2003 Reference: CVE CAN-2003-0574 Reference: SGI BUGS 850587 889119 Fixed in : IRIX 6.5.21 or patch 5182 SGI provides this information freely to the SGI user community for...