1089 matches found
CVE-2000-0207
SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters...
CVE-2000-0207
CVE-2000-0207 affects SGI InfoSearch Infosrch.cgi where the fname parameter fails to sanitize input, enabling remote arbitrary command execution via shell metacharacters. This is a remote web-server issue likely yielding command execution under the web server user. Nessus notes describe the flaw ...
Irix Objectserver remote exploit
At 08:52 AM 3/29/2000 -0500, Howard wrote: Since the patches are now officially released, I feel I can finally release the details of the SGI objectserver vulnerability. This vulnerability was initailly reported to CERT and SGI Security on October 6, 1997. A beta version of patch 2849 was provide...
Objectserver vulnerability
Since the patches are now officially released, I feel I can finally release the details of the SGI objectserver vulnerability. This vulnerability was initailly reported to CERT and SGI Security on October 6, 1997. A beta version of patch 2849 was provided in February 1998. Howard ----- Forwarded...
SGI IRIX 5.x6.x - Objectserver
SGI IRIX 5.x6.x - Objectserver // source: https://www.securityfocus.com/bid/1079/info A vulnerability exists in SGI's Objectserver service. By exploiting a vulnerability in this service, remote attackers can add root privileged accounts to the system being compromised. While a patch was made...
SGI IRIX 5.x/6.x - Objectserver
// source: https://www.securityfocus.com/bid/1079/info A vulnerability exists in SGI's Objectserver service. By exploiting a vulnerability in this service, remote attackers can add root privileged accounts to the system being compromised. While a patch was made available, and IRIX 6.2 systems wer...
SGI Security Advisory
SGI Security Advisory Title: Vulnerability in IRIX 5.3 and 6.2 objectserver Number: 20000303-01-PX Date: March 28, 2000 SGI provides this information freely to the SGI user community for its consideration, interpretation, implementation and use. SGI recommends that this information be acted upon ...
CVE-2000-0245
Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts...
irix-infosrch.cgi.txt
Hi, InfoSearch is a web-based interface to books, manpages, and relnotes, distributed by SGI. No suprises here, no parsing is done on the 'fname' variable before being passed to man2html. i.e. when cmd is 'getdoc' and db is 'man'. Also, fname is the full path to the manpage/relnote! I'm sure...
SGI InfoSearch infosrch.cgi fname Parameter Arbitrary Command Execution
The remote web server is hosting the 'infosrch.cgi' script. The installed version of this script fails to properly sanitize user- supplied input to the 'fname' variable. An attacker, exploiting this flaw, could execute arbitrary commands on the remote host subject to the privileges of the web...
CVE-2000-0207
SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters...
CVE-1999-0030
The CVE-1999-0030 entry concerns the xlock command on SGI IRIX where a buffer overflow can grant root privileges. The core information across connected sources confirms: (1) affected component: xlock on SGI IRIX; (2) vulnerability type: buffer overflow leading to root privileges; (3) root-level i...
CVE-1999-0030
root privileges via buffer overflow in xlock command on SGI IRIX systems...
CVE-1999-0270
Directory traversal vulnerability in pfdispaly.cgi program sometimes referred to as "pfdisplay" for SGI's Performer API Search Tool performertools allows remote attackers to read arbitrary files...
CVE-1999-0765
The SGI IRIX midikeys vulnerability (CVE-1999-0765) resides in a setuid-root binary in /usr/sbin that allowed local users to modify root-owned files (notably /etc/passwd) via the text editor interface, enabling privilege escalation to root. The linked Red Hat/NVD entries corroborate the basic des...
CVE-1999-0765
SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor...
SGI IRIX 6.2 - midikeyssoundplayer Local Privilege Escalation
SGI IRIX 6.2 - midikeyssoundplayer Local Privilege Escalation !/bin/sh source: https://www.securityfocus.com/bid/909/info SGI's Irix operating system ships with an X11 application called 'soundplayer' which is used to play .WAV files. It is not setuid root by itself, but can inherit root privileg...
SGI IRIX 6.2 - 'midikeys'/'soundplayer' Local Privilege Escalation
!/bin/sh source: https://www.securityfocus.com/bid/909/info SGI's Irix operating system ships with an X11 application called 'soundplayer' which is used to play .WAV files. It is not setuid root by itself, but can inherit root privileges if called by midikeys which is setuid on some old IRIX...
SCO Open Server 5.0.5 IRIX 6.2 ibX11X11 ToolkitAthena Widget Library - Local Buffer Overflow
SCO Open Server 5.0.5 IRIX 6.2 ibX11X11 ToolkitAthena Widget Library - Local Buffer Overflow // source: https://www.securityfocus.com/bid/884/info SCO Openserver and SGI IRIX 6.2 confirmed, possibly others are vulnerable to several buffer overflows in various shared libraries related to the X...
