Vulnerabilities (CVE)

Filtered by vendor Sgi Subscribe
Filtered by product Irix
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-1999-0035 2 Gnu, Sgi 2 Inet, Irix 2008-09-09 5.1 MEDIUM N/A
Race condition in signal handling routine in ftpd, allowing read/write arbitrary files.
CVE-1999-0032 5 Bsdi, Freebsd, Next and 2 more 5 Bsd Os, Freebsd, Nextstep and 2 more 2008-09-09 7.2 HIGH N/A
Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option.
CVE-1999-0030 1 Sgi 1 Irix 2008-09-09 7.2 HIGH N/A
root privileges via buffer overflow in xlock command on SGI IRIX systems.
CVE-1999-0029 1 Sgi 1 Irix 2008-09-09 7.2 HIGH N/A
root privileges via buffer overflow in ordist command on SGI IRIX systems.
CVE-1999-0028 1 Sgi 1 Irix 2008-09-09 7.2 HIGH N/A
root privileges via buffer overflow in login/scheme command on SGI IRIX systems.
CVE-2005-0464 1 Sgi 1 Irix 2008-09-05 2.1 LOW N/A
gr_osview in SGI IRIX 6.5.22, and possibly other 6.5 versions, does not drop privileges when opening description files while in debug mode, which allows local users to read a line from arbitrary files via the -d and -D options, which prints the line as a formatting error.
CVE-2005-0465 1 Sgi 1 Irix 2008-09-05 2.1 LOW N/A
gr_osview in SGI IRIX does not drop privileges before opening files, which allows local users to overwrite arbitrary files via the -s option.
CVE-2004-2001 1 Sgi 1 Irix 2008-09-05 4.6 MEDIUM N/A
ifconfig "-arp" in SGI IRIX 6.5 through 6.5.22m does not properly disable ARP requests from being sent or received.
CVE-2004-1891 1 Sgi 1 Irix 2008-09-05 5.0 MEDIUM N/A
The ftp_syslog function in ftpd in SGI IRIX 6.5.20 "doesn't work with anonymous FTP," which has an unknown impact, possibly preventing the actions of anonymous users from being logged.
CVE-2003-0573 1 Sgi 1 Irix 2008-09-05 5.0 MEDIUM N/A
The DNS callbacks in nsd in SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, do not perform sufficient sanity checking, with unknown impact.
CVE-2003-0683 1 Sgi 1 Irix 2008-09-05 7.5 HIGH N/A
NFS in SGI 6.5.21m and 6.5.21f does not perform access checks in certain configurations when an /etc/exports entry uses wildcards without any hostnames or groups, which could allow attackers to bypass intended restrictions.
CVE-2003-0176 1 Sgi 1 Irix 2008-09-05 5.0 MEDIUM N/A
The Name Service Daemon (nsd), when running on an NIS master on SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, allows remote attackers to cause a denial of service (crash) via a UDP port scan.
CVE-2003-0177 1 Sgi 1 Irix 2008-09-05 4.6 MEDIUM N/A
SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, does not follow "-" entries in the /etc/group file, which may cause subsequent group membership entries to be processed inadvertently.
CVE-2002-1786 1 Sgi 1 Irix 2008-09-05 2.1 LOW N/A
SGI IRIX 6.5 through 6.5.14 applies a umask of 022 to root core dumps, which allows local users to read the core dumps and possibly obtain sensitive information.
CVE-2002-1787 1 Sgi 1 Irix 2008-09-05 4.6 MEDIUM N/A
Buffer overflow in uux in eoe.sw.uucp package of SGI IRIX 6.5 through 6.5.17 allows local users to execute arbitrary code via unknown attack vectors.
CVE-2002-1791 1 Sgi 1 Irix 2008-09-05 2.1 LOW N/A
SGI IRIX 6.5 through 6.5.17 creates temporary desktop files with world-writable permissions, which allows local users to overwrite or corrupt those files.
CVE-2002-1517 1 Sgi 2 Freeware, Irix 2008-09-05 4.6 MEDIUM N/A
fsr_efs in IRIX 6.5 allows local users to conduct unauthorized file activities via a symlink attack, possibly via the .fsrlast file.
CVE-2002-1419 1 Sgi 1 Irix 2008-09-05 7.5 HIGH N/A
The upgrade of IRIX on Origin 3000 to 6.5.13 through 6.5.16 changes the MAC address of the system, which could modify intended access restrictions that are based on a MAC address.
CVE-2002-1518 1 Sgi 1 Irix 2008-09-05 3.6 LOW N/A
mv in IRIX 6.5 creates a directory with world-writable permissions while moving a directory, which could allow local users to modify files and directories.
CVE-2002-0041 1 Sgi 1 Irix 2008-09-05 5.0 MEDIUM N/A
Unknown vulnerability in Mail for SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, when running with the -R option, allows local and remote attackers to cause a core dump.
CVE-2002-0040 1 Sgi 1 Irix 2008-09-05 2.1 LOW N/A
Vulnerability in SGI IRIX 6.5.11 through 6.5.15f allows local users to cause privileged applications to dump core via the HOSTALIASES environment variable, which might allow the users to gain privileges.
CVE-2002-0039 1 Sgi 1 Irix 2008-09-05 5.0 MEDIUM N/A
rpcbind in SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, allows remote attackers to cause a denial of service (crash) via malformed RPC packets with invalid lengths.
CVE-2002-0042 1 Sgi 1 Irix 2008-09-05 2.1 LOW N/A
Vulnerability in the XFS file system for SGI IRIX before 6.5.12 allows local users to cause a denial of service (hang) by creating a file that is not properly processed by XFS.
CVE-2002-0017 1 Sgi 1 Irix 2008-09-05 7.5 HIGH N/A
Buffer overflow in SNMP daemon (snmpd) on SGI IRIX 6.5 through 6.5.15m allows remote attackers to execute arbitrary code via an SNMP request.
CVE-2001-0800 1 Sgi 1 Irix 2008-09-05 10.0 HIGH N/A
lpsched in IRIX 6.5.13f and earlier allows remote attackers to execute arbitrary commands via shell metacharacters.
CVE-2000-0893 1 Sgi 1 Irix 2008-09-05 5.0 MEDIUM N/A
The presence of the Distributed GL Daemon (dgld) service on port 5232 on SGI IRIX systems allows remote attackers to identify the target host as an SGI system.
CVE-2000-0795 1 Sgi 1 Irix 2008-09-05 7.2 HIGH N/A
Buffer overflow in lpstat in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long -n option.
CVE-2000-0798 1 Sgi 1 Irix 2008-09-05 10.0 HIGH N/A
The truncate function in IRIX 6.x does not properly check for privileges when the file is in the xfs file system, which allows local users to delete the contents of arbitrary files.
CVE-2000-0733 1 Sgi 1 Irix 2008-09-05 10.0 HIGH N/A
Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to execute arbitrary commands via a long RLD variable in the IAC-SB-TELOPT_ENVIRON request.
CVE-2000-0794 1 Sgi 1 Irix 2008-09-05 7.2 HIGH N/A
Buffer overflow in IRIX libgl.so library allows local users to gain root privileges via a long HOME variable to programs such as (1) gmemusage and (2) gr_osview.
CVE-1999-1401 1 Sgi 1 Irix 2008-09-05 4.6 MEDIUM N/A
Vulnerability in Desktop searchbook program in IRIX 5.0.x through 6.2 sets insecure permissions for certain user files (iconbook and searchbook).
CVE-1999-1554 1 Sgi 1 Irix 2008-09-05 2.1 LOW N/A
/usr/sbin/Mail on SGI IRIX 3.3 and 3.3.1 does not properly set the group ID to the group ID of the user who started Mail, which allows local users to read the mail of other users.
CVE-1999-1181 1 Sgi 1 Irix 2008-09-05 7.2 HIGH N/A
Vulnerability in On-Line Customer Registration software for IRIX 6.2 through 6.4 allows local users to gain root privileges.
CVE-1999-1102 4 Apple, Bsd, Sgi and 1 more 4 A Ux, Bsd, Irix and 1 more 2008-09-05 2.1 LOW N/A
lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack that is triggered after invoking lpr 1000 times.