SGI IRIX rpc.xfsmd uses weak authentication mechanism for RPC authentication

Overview The XFS file system on SGI systems allows anonymous remote users to call xfs-related RPC functions. Description XFS is a 64-bit compliant journaling file system. The XFS journaling filesystem daemon rpc.xfsmd on SGI systems uses the default AUTHUNIX authentication mechanism a client-base...

SGI IRIX rpc.xfsmd does not filter shell metacharacters from user input before invoking popen() function

Overview The XFS journaling filesystem daemon uses a call to popen3 with unfiltered client-controlled input. This will lead to arbitrary command execution on remote systems. Description XFS is a 64-bit compliant journaling file system. The XFS journaling filesystem daemon xfsmd on SGI systems use...

CVE-2002-0042

Vulnerability in the XFS file system for SGI IRIX before 6.5.12 allows local users to cause a denial of service hang by creating a file that is not properly processed by XFS...

CVE-2002-0356

Vulnerability in XFS filesystem reorganizer fsrxfs in SGI IRIX 6.5.10 and earlier allows local users to gain root privileges by overwriting critical system files...

IRIX fsr_xfs vulnerability

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: fsrxfs vulnerability Number: 20020504-01-I Date: May 8, 2002 Reference: CAN-2002-0356 - ----------------------- - --- Issue Specifics --- - ----------------------- It's been reported that there is a problem with the fsrxfs XFS...

IRIX XFS filesystem denial of service attack

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: IRIX XFS filesystem denial of service attack Number: 20020402-01-P Date: April 15, 2002 Reference: CAN-2002-0042 - ----------------------- - --- Issue Specifics --- - ----------------------- It has been reported that there is a...

Irix XFS DoS

It's possible to create file to cause error in processing application...

XFree86-xfs-4.0.1-1 DoS

Hello, xfs from the package XFree86-xfs-4.0.1-1 i386.rpm, RedHat 7.0 seems to suffer from a Denial of Service attack. To cause xfs to stop responding for requests, try to do the fillowing: $ telnet victim xfs /dev/urandom Repeat about 100 or 1000 times and you get Connection refused message...

DoS против XFree-xfs

Большое количество случайных данных в порт приложения приводит к отказу в обслуживнаии...

CVE-2000-0263

CVE-2000-0263 affects the X font server (xfs) on Red Hat Linux 6.x. A malformed request can cause a denial of service, impacting availability (CVSS v2 base score 2.1). Vector: local, low complexity, no authentication required; impact is limited to availability. No explicit remediation details are...

CVE-2000-0798

The truncate function in IRIX 6.x does not properly check for privileges when the file is in the xfs file system, which allows local users to delete the contents of arbitrary files...

CVE-2000-0798

CVE-2000-0798 affects IRIX 6.x when files reside on the xfs filesystem. The vulnerability arises because the truncate function does not properly check privileges, enabling local users to delete contents of arbitrary files. Public sources (NVD/NVD-linked entries) confirm the affected component as ...

CVE-2000-0286

Technical details about CVE-2000-0286 are not publicly provided in the supplied documents. Monitor for updates from NVD/CVE feeds for affected products, fixes, and remediation guidance.

xfs security issues (fwd)

Hi, I notice xfs the X font server recently hit the news. It seems I never sent the below message on to Bugtraq at least a search doesn't show up much. I'm guessing it's still relevant. This message illustrates that the xfs problem recently mentioned by Michal is but one of many minor...

CVE-1999-0434

XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service...

CVE-1999-0434

XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service...

IRIX 6.2/6.3/6.4 - xfs truncate() Privilege Check

/ source: https://www.securityfocus.com/bid/1540/info The truncate system call on a number of versions of the IRIX operating system with the xfs file system does not properly check permissions before truncating a file, making it possible for unprivileged users to damage files to which they would...

IRIX 6.26.36.4 - xfs truncate() Privilege Check

IRIX 6.26.36.4 - xfs truncate Privilege Check / source: https://www.securityfocus.com/bid/1540/info The truncate system call on a number of versions of the IRIX operating system with the xfs file system does not properly check permissions before truncating a file, making it possible for...

PT-2010-5687 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: SUSE Linux Enterprise affected versions not specified Linux kernel versions prior to 2.6.35 Description: The issue concerns multiple vulnerabilities in the Linux kernel, specifically affecting the xfs swapext function in fs/xfs/xfs dfrag.c...

PT-2004-3722 · Linux · Kernel-Image-2.4.19-Sun4U +7

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.4.26 Linux kernel versions prior to 2.6.6 aa-sources versions prior to 2.4.23-r2 kernel-image-2.4.18-powerpc-xfs version kernel-image-2.4.18-sun4u version kernel-image-2.4.18-sun4u-smp version...