Sgi
Page 2 of 3 — Sgi CVEs from a corpus of 258, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2003-0473 | | 2003-08-07 | Unknown vulnerability in the IPv6 capability in IRIX 6.5.19 causes snoop to process packets as the root user, with unknown implications. | |
CVE-2003-0472 | | 2003-08-07 | The IPv6 capability in IRIX 6.5.19 allows remote attackers to cause a denial of service (hang) in inetd via port scanning. | |
CVE-2003-0174 | Critical | 9.8 | 2003-05-12 | The LDAP name service (nsd) in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been provided by an LDAP server, which could… |
CVE-2003-0173 | | 2003-05-05 | xfsdq in xfsdump does not create quota information files securely, which allows local users to gain root privileges. | |
CVE-2002-1419 | | 2003-04-11 | The upgrade of IRIX on Origin 3000 to 6.5.13 through 6.5.16 changes the MAC address of the system, which could modify intended access restrictions that are bas… | |
CVE-2002-1518 | | 2003-04-02 | mv in IRIX 6.5 creates a directory with world-writable permissions while moving a directory, which could allow local users to modify files and directories. | |
CVE-2002-1517 | | 2003-04-02 | fsr_efs in IRIX 6.5 allows local users to conduct unauthorized file activities via a symlink attack, possibly via the .fsrlast file. | |
CVE-2002-1516 | | 2003-04-02 | rpcbind in SGI IRIX, when using the -w command line switch, allows local users to overwrite arbitrary files via a symlink attack. | |
CVE-2003-0028 | | 2003-03-25 | Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, includin… | |
CVE-2003-0064 | | 2003-03-03 | The dtterm terminal emulator allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in… | |
CVE-2002-2185 | | 2002-12-31 | The Internet Group Management Protocol (IGMP) allows local users to cause a denial of service via an IGMP membership report to a target's Ethernet address inst… | |
CVE-2002-2093 | | 2002-12-31 | The Video Control Panel on SGI O2/IRIX 6.5, when the Default Input is set to "Output Video", allows attackers to access a console session by running videoout t… | |
CVE-2002-1791 | | 2002-12-31 | SGI IRIX 6.5 through 6.5.17 creates temporary desktop files with world-writable permissions, which allows local users to overwrite or corrupt those files. | |
CVE-2002-1787 | | 2002-12-31 | Buffer overflow in uux in eoe.sw.uucp package of SGI IRIX 6.5 through 6.5.17 allows local users to execute arbitrary code via unknown attack vectors. | |
CVE-2002-1786 | | 2002-12-31 | SGI IRIX 6.5 through 6.5.14 applies a umask of 022 to root core dumps, which allows local users to read the core dumps and possibly obtain sensitive informatio… | |
CVE-2002-1584 | | 2002-12-27 | Unknown vulnerability in the AUTH_DES authentication for RPC in Solaris 2.5.1, 2.6, and 7, SGI IRIX 6.5 to 6.5.19f, and possibly other platforms, allows remote… | |
CVE-2002-1323 | | 2002-12-11 | Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using… | |
CVE-2002-1318 | | 2002-12-11 | Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an encrypted password… | |
CVE-2002-1317 | | 2002-12-11 | Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (crash) or… | |
CVE-2002-1265 | | 2002-11-12 | The Sun RPC functionality in multiple libc implementations does not provide a time-out mechanism when reading data from TCP connections, which allows remote at… | |
CVE-2002-0875 | | 2002-09-05 | Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group. | |
CVE-2002-0632 | | 2002-09-05 | Vulnerability in SGI BDS (Bulk Data Service) BDSPro 2.4 and earlier allows clients to read arbitrary files on a BDS server. | |
CVE-2002-0358 | | 2002-07-26 | MediaMail and MediaMail Pro in SGI IRIX 6.5.16 and earlier allows local users to force the program to dump core via certain arguments, which could allow the us… | |
CVE-2002-0678 | | 2002-07-23 | CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRAN… | |
CVE-2002-0677 | | 2002-07-23 | CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file… | |
CVE-2002-0652 | | 2002-07-03 | xfsmd for IRIX 6.5 through 6.5.16 allows remote attackers to execute arbitrary code via shell metacharacters that are not properly filtered from several calls… | |
CVE-2002-0631 | | 2002-07-03 | Unknown vulnerability in nveventd in NetVisualyzer on SGI IRIX 6.5 through 6.5.16 allows local users to write arbitrary files and gain root privileges. | |
CVE-2002-0359 | | 2002-07-03 | xfsmd for IRIX 6.5 through 6.5.16 uses weak authentication, which allows remote attackers to call dangerous RPC functions, including those that can mount or un… | |
CVE-2002-0357 | | 2002-06-18 | Unknown vulnerability in rpc.passwd in the nfs.sw.nis subsystem of SGI IRIX 6.5.15 and earlier allows local users to gain root privileges. | |
CVE-2002-0042 | | 2002-06-18 | Vulnerability in the XFS file system for SGI IRIX before 6.5.12 allows local users to cause a denial of service (hang) by creating a file that is not properly… | |
CVE-2002-0356 | | 2002-05-29 | Vulnerability in XFS filesystem reorganizer (fsr_xfs) in SGI IRIX 6.5.10 and earlier allows local users to gain root privileges by overwriting critical system… | |
CVE-2002-0355 | | 2002-05-29 | netstat in SGI IRIX before 6.5.12 allows local users to determine the existence of files on the system, even if the users do not have the appropriate permissio… | |
CVE-2002-0174 | | 2002-05-29 | nsd on SGI IRIX before 6.5.11 allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the nsd.dump file. | |
CVE-2002-0213 | | 2002-05-16 | xkas in Xinet K-AShare 0.011.01 for IRIX allows local users to read arbitrary files via a symlink attack on the VOLICON file, which is copied to the .HSicon fi… | |
CVE-2002-0173 | | 2002-05-16 | Buffer overflow in cpr for the eoe.sw.cpr SGI Checkpoint-Restart Software package on SGI IRIX 6.5.10 and earlier may allow local users to gain root privileges. | |
CVE-2002-0172 | | 2002-05-16 | /dev/ipfilter on SGI IRIX 6.5 is installed by /dev/MAKEDEV with insecure default permissions (644), which could allow a local user to cause a denial of service… | |
CVE-2002-0171 | | 2002-05-16 | IRISconsole 2.0 may allow users to log into the icadmin account with an incorrect password in some circumstances, which could allow users to gain privileges. | |
CVE-2002-0041 | | 2002-04-22 | Unknown vulnerability in Mail for SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, when running with the -R option, allows local and remote attacke… | |
CVE-2002-0017 | | 2002-04-03 | Buffer overflow in SNMP daemon (snmpd) on SGI IRIX 6.5 through 6.5.15m allows remote attackers to execute arbitrary code via an SNMP request. | |
CVE-2002-0040 | | 2002-03-28 | Vulnerability in SGI IRIX 6.5.11 through 6.5.15f allows local users to cause privileged applications to dump core via the HOSTALIASES environment variable, whi… | |
CVE-2002-0039 | | 2002-03-28 | rpcbind in SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, allows remote attackers to cause a denial of service (crash) via malformed RPC packets… | |
CVE-2002-0038 | | 2002-01-31 | Vulnerability in the cache-limiting function of the unified name service daemon (nsd) in IRIX 6.5.4 through 6.5.11 allows remote attackers to cause a denial of… | |
CVE-2001-0891 | | 2002-01-31 | Format string vulnerability in NQS daemon (nqsdaemon) in NQE 3.3.0.16 for CRAY UNICOS and SGI IRIX allows a local user to gain root privileges by using qsub to… | |
CVE-2001-0797 | | 2001-12-12 | Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments thro… | |
CVE-2001-0823 | | 2001-12-06 | The pmpost program in Performance Co-Pilot (PCP) before 2.2.1-3 allows a local user to gain privileges via a symlink attack on the NOTICES file in the PCP log… | |
CVE-2001-0801 | | 2001-12-06 | lpstat in IRIX 6.5.13f and earlier allows local users to gain root privileges by specifying a Trojan Horse nettype shared library. | |
CVE-2001-0800 | | 2001-12-06 | lpsched in IRIX 6.5.13f and earlier allows remote attackers to execute arbitrary commands via shell metacharacters. | |
CVE-2001-0799 | | 2001-12-06 | Buffer overflows in lpsched in IRIX 6.5.13f and earlier allow remote attackers to execute arbitrary commands via a long argument. | |
CVE-2001-0796 | | 2001-12-06 | SGI IRIX 6.5 through 6.5.12f and possibly earlier versions, and FreeBSD 3.0, allows remote attackers to cause a denial of service via a malformed IGMP multicas… | |
CVE-2001-1456 | | 2001-09-04 | Buffer overflow in the (1) smap/smapd and (2) CSMAP daemons for Gauntlet Firewall 5.0 through 6.0 allows remote attackers to execute arbitrary code via a craft… | |
CVE-2000-1193 | | 2001-08-31 | Performance Metrics Collector Daemon (PMCD) in Performance Copilot in IRIX 6.x allows remote attackers to cause a denial of service (resource exhaustion) via a… | |
CVE-2001-0554 | | 2001-08-14 | Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options incl… | |
CVE-2001-0485 | | 2001-06-27 | Unknown vulnerability in netprint in IRIX 6.2, and possibly other versions, allows local users with lp privileges attacker to execute arbitrary commands via th… | |
CVE-2001-0331 | | 2001-06-27 | Buffer overflow in Embedded Support Partner (ESP) daemon (rpc.espd) in IRIX 6.5.8 and earlier allows remote attackers to execute arbitrary commands. | |
CVE-2001-0249 | Critical | 9.8 | 2001-06-18 | Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which… |
CVE-2001-0248 | Critical | 9.8 | 2001-06-18 | Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which… |
CVE-2001-0247 | | 2001-06-18 | Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence, as seen in… | |
CVE-2000-0893 | | 2001-02-16 | The presence of the Distributed GL Daemon (dgld) service on port 5232 on SGI IRIX systems allows remote attackers to identify the target host as an SGI system. | |
CVE-2000-0844 | | 2000-11-14 | Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbit… | |
CVE-2000-0799 | | 2000-10-20 | inpview in InPerson in SGI IRIX 5.3 through IRIX 6.5.10 allows local users to gain privileges via a symlink attack on the .ilmpAAA temporary file. | |
CVE-2000-0798 | | 2000-10-20 | The truncate function in IRIX 6.x does not properly check for privileges when the file is in the xfs file system, which allows local users to delete the conten… | |
CVE-2000-0797 | | 2000-10-20 | Buffer overflow in gr_osview in IRIX 6.2 and 6.3 allows local users to gain privileges via a long -D option. | |
CVE-2000-0796 | | 2000-10-20 | Buffer overflow in dmplay in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long command line option. | |
CVE-2000-0795 | | 2000-10-20 | Buffer overflow in lpstat in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long -n option. | |
CVE-2000-0794 | | 2000-10-20 | Buffer overflow in IRIX libgl.so library allows local users to gain root privileges via a long HOME variable to programs such as (1) gmemusage and (2) gr_osvie… | |
CVE-2000-0733 | | 2000-10-20 | Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to execute arbitrary command… | |
CVE-2000-0545 | | 2000-08-08 | Buffer overflow in mailx mail command (aka Mail) on Linux systems allows local users to gain privileges via a long -c (carbon copy) parameter. | |
CVE-2000-0579 | | 2000-06-21 | IRIX crontab creates temporary files with predictable file names and with the umask of the user, which could allow local users to modify another user's crontab… | |
CVE-2000-0578 | | 2000-06-21 | SGI MIPSPro compilers C, C++, F77 and F90 generate temporary files in /tmp with predictable file names, which could allow local users to insert malicious conte… | |
CVE-2000-0533 | | 2000-06-20 | Vulnerability in cvconnect in SGI IRIX WorkShop allows local users to overwrite arbitrary files. | |
CVE-2000-0283 | | 2000-04-12 | The default installation of IRIX Performance Copilot allows remote attackers to access sensitive system information via the pmcd daemon. | |
CVE-2000-0245 | | 2000-03-27 | Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts. | |
CVE-2000-0207 | | 2000-03-01 | SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters. | |
CVE-2000-1221 | | 2000-01-08 | The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostname of the local mach… | |
CVE-2000-1220 | | 2000-01-08 | The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute… | |
CVE-2000-0013 | | 1999-12-31 | IRIX soundplayer program allows local users to gain privileges by including shell metacharacters in a .wav file, which is executed via the midikeys program. | |
CVE-1999-1102 | | 1999-12-31 | lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack t… | |
CVE-1999-1066 | | 1999-12-22 | Quake 1 server responds to an initial UDP game connection request with a large amount of traffic, which allows remote attackers to use the server as an amplifi… | |
CVE-1999-0949 | | 1999-11-02 | Buffer overflow in canuum program for Canna input system allows local users to gain root privileges. | |
CVE-1999-0948 | | 1999-11-02 | Buffer overflow in uum program for Canna input system allows local users to gain root privileges. | |
CVE-1999-0692 | | 1999-07-19 | The default configuration of the Array Services daemon (arrayd) disables authentication, allowing remote users to gain root privileges. | |
CVE-1999-1485 | | 1999-05-31 | nsd in IRIX 6.5 through 6.5.2 exports a virtual filesystem on a UDP port, which allows remote attackers to view files and cause a possible denial of service by… | |
CVE-1999-0765 | | 1999-05-19 | SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor. | |
CVE-1999-0413 | | 1999-03-01 | A buffer overflow in the SGI X server allows local users to gain root access through the X server font path. | |
CVE-1999-0461 | | 1999-01-28 | Versions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to insert and delete entries by spoofing a source address. | |
CVE-1999-0215 | | 1998-10-26 | Routed allows attackers to append data to files. | |
CVE-1999-1181 | | 1998-09-29 | Vulnerability in On-Line Customer Registration software for IRIX 6.2 through 6.4 allows local users to gain root privileges. | |
CVE-1999-1409 | | 1998-07-03 | The at program in IRIX 6.2 and NetBSD 1.3.2 and earlier allows local users to read portions of arbitrary files by submitting the file to at with the -f argumen… | |
CVE-1999-0314 | | 1998-07-01 | ioconfig on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames. | |
CVE-1999-0313 | | 1998-07-01 | disk_bandwidth on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames. | |
CVE-1999-0329 | | 1998-06-01 | SGI mediad program allows local users to gain root access. | |
CVE-1999-1492 | | 1998-05-27 | Vulnerability in (1) diskperf and (2) diskalign in IRIX 6.4 allows local attacker to create arbitrary root owned files, leading to root privileges. | |
CVE-1999-1039 | | 1998-05-27 | Vulnerability in (1) diskalign and (2) diskperf in IRIX 6.4 patches 2291 and 2848 allow a local user to create root-owned files leading to a root compromise. | |
CVE-1999-0108 | | 1998-05-01 | The printers program in IRIX has a buffer overflow that gives root access to local users. | |
CVE-1999-1501 | | 1998-04-08 | (1) ipxchk and (2) ipxlink in SGI OS2 IRIX 6.3 does not properly clear the IFS environmental variable before executing system calls, which allows local users t… | |
CVE-1999-1114 | | 1998-04-08 | Buffer overflow in Korn Shell (ksh) suid_exec program on IRIX 6.x and earlier, and possibly other operating systems, allows local users to gain root privileges. | |
CVE-1999-1040 | | 1998-04-08 | Vulnerabilities in (1) ipxchk and (2) ipxlink in NetWare Client 1.0 on IRIX 6.3 and 6.4 allows local users to gain root access via a modified IFS environmental… | |
CVE-1999-0009 | | 1998-04-08 | Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases. | |
CVE-1999-0270 | | 1998-04-03 | Directory traversal vulnerability in pfdispaly.cgi program (sometimes referred to as "pfdisplay") for SGI's Performer API Search Tool (performer_tools) allows… | |
CVE-1999-1183 | | 1998-04-02 | System Manager sysmgr GUI in SGI IRIX 6.4 and 6.3 allows remote attackers to execute commands by providing a trojan horse (1) runtask or (2) runexec descriptor… |