Vulnerabilities (CVE)

Filtered by vendor Sgi Subscribe
Filtered by product Irix
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-1999-1040 1 Sgi 1 Irix 2016-10-18 7.2 HIGH N/A
Vulnerabilities in (1) ipxchk and (2) ipxlink in NetWare Client 1.0 on IRIX 6.3 and 6.4 allows local users to gain root access via a modified IFS environmental variable.
CVE-1999-1067 1 Sgi 1 Irix 2016-10-18 5.0 MEDIUM N/A
SGI MachineInfo CGI program, installed by default on some web servers, prints potentially sensitive system status information, which could be used by remote attackers for information gathering activities.
CVE-2005-0139 1 Sgi 1 Irix 2016-05-09 7.5 HIGH N/A
Unknown vulnerability in rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not sufficiently restrict access rights for read-mostly exports, which allows attackers to conduct unauthorized activities.
CVE-2005-0138 1 Sgi 1 Irix 2016-05-09 7.5 HIGH N/A
rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not correctly allow access to anonymous clients that connect from a system whose hostname can not be determined. NOTE: while this issue occurs in a security mechanism, there is no apparent attacker role and probably does not satisfy the CVE definition of a vulnerability.
CVE-1999-1183 1 Sgi 1 Irix 2013-08-21 7.6 HIGH N/A
System Manager sysmgr GUI in SGI IRIX 6.4 and 6.3 allows remote attackers to execute commands by providing a trojan horse (1) runtask or (2) runexec descriptor file, which is used to execute a System Manager Task when the user's Mailcap entry supports the x-sgi-task or x-sgi-exec type.
CVE-2011-3337 4 Eeye, Hp, Sgi and 1 more 5 Digital Security Audits, Retina Network Security Scanner, Hp-ux and 2 more 2012-01-04 6.9 MEDIUM N/A
eEye Audit ID 2499 in eEye Digital Security Audits 2406 through 2423 for eEye Retina Network Security Scanner on HP-UX, IRIX, and Solaris allows local users to gain privileges via a Trojan horse gauntlet program in an arbitrary directory under /usr/local/.
CVE-2010-2594 7 Ibm, Intersect Alliance, Linux and 4 more 14 Aix, Snare Agent, Snare Epilog and 11 more 2010-07-02 6.8 MEDIUM N/A
Multiple cross-site request forgery (CSRF) vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earlier on Solaris, Snare Agent 3.1.7 and earlier on Windows, Snare Agent 1.5.0 and earlier on Linux and AIX, Snare Agent 1.4 and earlier on IRIX, Snare Epilog 1.5.3 and earlier on Windows, and Snare Epilog 1.2 and earlier on UNIX allow remote attackers to hijack the authentication of administrators for requests that (1) change the password or (2) change the listening port.
CVE-1999-0027 1 Sgi 1 Irix 2009-02-25 7.2 HIGH N/A
root privileges via buffer overflow in eject command on SGI IRIX systems.
CVE-2002-0355 1 Sgi 1 Irix 2008-09-11 2.1 LOW N/A
netstat in SGI IRIX before 6.5.12 allows local users to determine the existence of files on the system, even if the users do not have the appropriate permissions.
CVE-2002-0357 1 Sgi 1 Irix 2008-09-11 7.2 HIGH N/A
Unknown vulnerability in rpc.passwd in the nfs.sw.nis subsystem of SGI IRIX 6.5.15 and earlier allows local users to gain root privileges.
CVE-2002-0356 1 Sgi 1 Irix 2008-09-11 7.2 HIGH N/A
Vulnerability in XFS filesystem reorganizer (fsr_xfs) in SGI IRIX 6.5.10 and earlier allows local users to gain root privileges by overwriting critical system files.
CVE-2002-0174 1 Sgi 1 Irix 2008-09-11 7.2 HIGH N/A
nsd on SGI IRIX before 6.5.11 allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the nsd.dump file.
CVE-2002-0172 1 Sgi 1 Irix 2008-09-11 2.1 LOW N/A
/dev/ipfilter on SGI IRIX 6.5 is installed by /dev/MAKEDEV with insecure default permissions (644), which could allow a local user to cause a denial of service (traffic disruption).
CVE-2002-0173 1 Sgi 1 Irix 2008-09-11 7.2 HIGH N/A
Buffer overflow in cpr for the eoe.sw.cpr SGI Checkpoint-Restart Software package on SGI IRIX 6.5.10 and earlier may allow local users to gain root privileges.
CVE-2003-0679 1 Sgi 1 Irix 2008-09-10 2.1 LOW N/A
Unknown vulnerability in the libcpr library for the Checkpoint/Restart (cpr) system on SGI IRIX 6.5.21f and earlier allows local users to truncate or overwrite certain files.
CVE-2003-0680 1 Sgi 1 Irix 2008-09-10 7.5 HIGH N/A
Unknown vulnerability in NFS for SGI IRIX 6.5.21 and earlier may allow an NFS client to bypass read-only restrictions.
CVE-2003-0576 1 Sgi 1 Irix 2008-09-10 5.0 MEDIUM N/A
Unknown vulnerability in the NFS daemon (nfsd) in SGI IRIX 6.5.19f and earlier allows remote attackers to cause a denial of service (kernel panic) via certain packets that cause XDR decoding errors, a different vulnerability than CVE-2003-0619.
CVE-2003-0574 1 Sgi 1 Irix 2008-09-10 7.2 HIGH N/A
Unknown vulnerability in SGI IRIX 6.5.x through 6.5.20, and possibly earlier versions, allows local users to cause a core dump in scheme and possibly gain privileges via certain environment variables, a different vulnerability than CVE-2001-0797 and CVE-1999-0028.
CVE-2003-0173 2 Sgi, Xfsdump 2 Irix, Xfsdump 2008-09-10 7.2 HIGH N/A
xfsdq in xfsdump does not create quota information files securely, which allows local users to gain root privileges.
CVE-2002-1516 1 Sgi 1 Irix 2008-09-10 4.6 MEDIUM N/A
rpcbind in SGI IRIX, when using the -w command line switch, allows local users to overwrite arbitrary files via a symlink attack.
CVE-2002-0875 2 Debian, Sgi 3 Debian Linux, Fam, Irix 2008-09-10 2.1 LOW N/A
Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group.
CVE-2002-0631 1 Sgi 1 Irix 2008-09-10 7.2 HIGH N/A
Unknown vulnerability in nveventd in NetVisualyzer on SGI IRIX 6.5 through 6.5.16 allows local users to write arbitrary files and gain root privileges.
CVE-2002-0632 1 Sgi 1 Irix 2008-09-10 5.0 MEDIUM N/A
Vulnerability in SGI BDS (Bulk Data Service) BDSPro 2.4 and earlier allows clients to read arbitrary files on a BDS server.
CVE-2000-0579 1 Sgi 1 Irix 2008-09-10 3.7 LOW N/A
IRIX crontab creates temporary files with predictable file names and with the umask of the user, which could allow local users to modify another user's crontab file as it is being edited.
CVE-2000-0283 1 Sgi 1 Irix 2008-09-10 6.4 MEDIUM N/A
The default installation of IRIX Performance Copilot allows remote attackers to access sensitive system information via the pmcd daemon.
CVE-2000-0207 1 Sgi 2 Infosearch, Irix 2008-09-10 7.5 HIGH N/A
SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters.
CVE-2000-0013 1 Sgi 1 Irix 2008-09-10 7.2 HIGH N/A
IRIX soundplayer program allows local users to gain privileges by including shell metacharacters in a .wav file, which is executed via the midikeys program.
CVE-1999-1468 4 Cray, Next, Sgi and 1 more 4 Unicos, Next, Irix and 1 more 2008-09-10 6.2 MEDIUM N/A
rdist in various UNIX systems uses popen to execute sendmail, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable.
CVE-1999-1319 1 Sgi 1 Irix 2008-09-10 10.0 HIGH N/A
Vulnerability in object server program in SGI IRIX 5.2 through 6.1 allows remote attackers to gain root privileges in certain configurations.
CVE-1999-1039 1 Sgi 1 Irix 2008-09-09 7.2 HIGH N/A
Vulnerability in (1) diskalign and (2) diskperf in IRIX 6.4 patches 2291 and 2848 allow a local user to create root-owned files leading to a root compromise.
CVE-1999-0960 1 Sgi 1 Irix 2008-09-09 7.2 HIGH N/A
IRIX cdplayer allows local users to create directories in arbitrary locations via a command line option.
CVE-1999-0692 2 Cray, Sgi 2 Unicos, Irix 2008-09-09 10.0 HIGH N/A
The default configuration of the Array Services daemon (arrayd) disables authentication, allowing remote users to gain root privileges.
CVE-1999-0765 1 Sgi 1 Irix 2008-09-09 10.0 HIGH N/A
SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor.
CVE-1999-0234 5 Caldera, Redhat, Sgi and 2 more 5 Openlinux, Linux, Irix and 2 more 2008-09-09 4.6 MEDIUM N/A
Bash treats any character with a value of 255 as a command separator.
CVE-1999-0329 1 Sgi 1 Irix 2008-09-09 7.2 HIGH N/A
SGI mediad program allows local users to gain root access.
CVE-1999-0413 1 Sgi 1 Irix 2008-09-09 7.2 HIGH N/A
A buffer overflow in the SGI X server allows local users to gain root access through the X server font path.
CVE-1999-0327 1 Sgi 1 Irix 2008-09-09 2.1 LOW N/A
SGI syserr program allows local users to corrupt files.
CVE-1999-0208 3 Ibm, Nec, Sgi 5 Aix, Asl Ux 4800, Ews-ux V and 2 more 2008-09-09 10.0 HIGH N/A
rpc.ypupdated (NIS) allows remote users to execute arbitrary commands.
CVE-1999-0328 1 Sgi 1 Irix 2008-09-09 7.2 HIGH N/A
SGI permissions program allows local users to gain root privileges.
CVE-1999-0215 1 Sgi 1 Irix 2008-09-09 6.4 MEDIUM N/A
Routed allows attackers to append data to files.
CVE-1999-0461 2 Linux, Sgi 2 Linux Kernel, Irix 2008-09-09 10.0 HIGH N/A
Versions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to insert and delete entries by spoofing a source address.
CVE-1999-0033 5 Ibm, Ncr, Sco and 2 more 7 Aix, Mp-ras, Open Desktop and 4 more 2008-09-09 7.2 HIGH N/A
Command execution in Sun systems via buffer overflow in the at program.
CVE-1999-0026 1 Sgi 1 Irix 2008-09-09 4.6 MEDIUM N/A
root privileges via buffer overflow in pset command on SGI IRIX systems.
CVE-1999-0195 2 Linux, Sgi 2 Linux Kernel, Irix 2008-09-09 5.0 MEDIUM N/A
Denial of service in RPC portmapper allows attackers to register or unregister RPC services or spoof RPC services using a spoofed source IP address such as 127.0.0.1.
CVE-1999-0019 7 Data General, Ibm, Ncr and 4 more 10 Dg Ux, Aix, Mp-ras and 7 more 2008-09-09 5.0 MEDIUM N/A
Delete or create a file via rpc.statd, due to invalid information.
CVE-1999-0148 1 Sgi 1 Irix 2008-09-09 7.5 HIGH N/A
The handler CGI program in IRIX allows arbitrary command execution.
CVE-1999-0083 1 Sgi 1 Irix 2008-09-09 5.0 MEDIUM N/A
getcwd() file descriptor leak in FTP.
CVE-1999-0073 2 Digital, Sgi 3 Osf 1, Unix, Irix 2008-09-09 10.0 HIGH N/A
Telnet allows a remote client to specify environment variables including LD_LIBRARY_PATH, allowing an attacker to bypass the normal system libraries and gain root access.
CVE-1999-0049 1 Sgi 1 Irix 2008-09-09 7.2 HIGH N/A
Csetup under IRIX allows arbitrary file creation or overwriting.
CVE-1999-0044 1 Sgi 1 Irix 2008-09-09 7.2 HIGH N/A
fsdump command in IRIX allows local users to obtain root access by modifying sensitive files.