Sgi
Page 3 of 3 — Sgi CVEs from a corpus of 258, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-1999-0003 | | 1998-04-01 | Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd). | |
CVE-1999-0960 | | 1998-03-20 | IRIX cdplayer allows local users to create directories in arbitrary locations via a command line option. | |
CVE-1999-1272 | | 1998-03-01 | Buffer overflows in CDROM Confidence Test program (cdrom) allow local users to gain root privileges. | |
CVE-1999-0125 | | 1998-01-25 | Buffer overflow in SGI IRIX mailx program. | |
CVE-1999-0018 | | 1997-12-05 | Buffer overflow in statd allows root privileges. | |
CVE-1999-0328 | | 1997-11-01 | SGI permissions program allows local users to gain root privileges. | |
CVE-1999-0327 | | 1997-11-01 | SGI syserr program allows local users to corrupt files. | |
CVE-1999-1131 | | 1997-10-24 | Buffer overflow in OSF Distributed Computing Environment (DCE) security demon (secd) in IRIX 6.4 and earlier allows attackers to cause a denial of service via… | |
CVE-1999-1214 | | 1997-09-15 | The asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of I/O notification, which allows local users to cau… | |
CVE-1999-0148 | | 1997-09-01 | The handler CGI program in IRIX allows arbitrary command execution. | |
CVE-1999-1399 | | 1997-08-20 | spaceball program in SpaceWare 7.3 v1.0 in IRIX 6.2 allows local users to gain root privileges by setting the HOSTNAME environmental variable to contain the co… | |
CVE-1999-0524 | Medium | 4.0 | 1997-08-01 | ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts. |
CVE-1999-0030 | | 1997-07-16 | root privileges via buffer overflow in xlock command on SGI IRIX systems. | |
CVE-1999-0029 | High | 8.4 | 1997-07-16 | root privileges via buffer overflow in ordist command on SGI IRIX systems. |
CVE-1999-0028 | | 1997-07-16 | root privileges via buffer overflow in login/scheme command on SGI IRIX systems. | |
CVE-1999-0027 | | 1997-07-16 | root privileges via buffer overflow in eject command on SGI IRIX systems. | |
CVE-1999-0026 | | 1997-07-16 | root privileges via buffer overflow in pset command on SGI IRIX systems. | |
CVE-1999-0025 | | 1997-07-16 | root privileges via buffer overflow in df command on SGI IRIX systems. | |
CVE-1999-0059 | High | 7.3 | 1997-07-14 | IRIX fam service allows an attacker to obtain a list of all files on the server. |
CVE-1999-0195 | | 1997-07-01 | Denial of service in RPC portmapper allows attackers to register or unregister RPC services or spoof RPC services using a spoofed source IP address such as 127… | |
CVE-1999-0033 | | 1997-06-12 | Command execution in Sun systems via buffer overflow in the at program. | |
CVE-1999-0083 | | 1997-06-11 | getcwd() file descriptor leak in FTP. | |
CVE-1999-0035 | Medium | 5.4 | 1997-05-29 | Race condition in signal handling routine in ftpd, allowing read/write arbitrary files. |
CVE-1999-0034 | | 1997-05-29 | Buffer overflow in suidperl (sperl), Perl 4.x and 5.x. | |
CVE-1999-1143 | | 1997-05-28 | Vulnerability in runtime linker program rld in SGI IRIX 6.x and earlier allows local users to gain privileges via setuid and setgid programs. | |
CVE-1999-0036 | High | 8.4 | 1997-05-26 | IRIX login program with a nonzero LOCKOUT parameter allows creation or damage to files. |
CVE-1999-1232 | | 1997-05-16 | Untrusted search path vulnerability in day5datacopier in SGI IRIX 6.2 allows local users to execute arbitrary commands via a modified PATH environment variable… | |
CVE-1999-1410 | | 1997-05-09 | addnetpr in IRIX 5.3 and 6.2 allows local users to overwrite arbitrary files and possibly gain root privileges via a symlink attack on the printers temporary f… | |
CVE-1999-1286 | | 1997-05-09 | addnetpr in SGI IRIX 6.2 and earlier allows local users to modify arbitrary files and possibly gain root access via a symlink attack on a temporary file. | |
CVE-1999-1461 | | 1997-05-07 | inpview in InPerson on IRIX 5.3 through IRIX 6.5.10 trusts the PATH environmental variable to find and execute the ttsession program, which allows local users… | |
CVE-1999-1398 | | 1997-05-07 | Vulnerability in xfsdump in SGI IRIX may allow local users to obtain root privileges via the bck.log log file, possibly via a symlink attack. | |
CVE-1999-1067 | | 1997-05-07 | SGI MachineInfo CGI program, installed by default on some web servers, prints potentially sensitive system status information, which could be used by remote at… | |
CVE-1999-0039 | High | 7.3 | 1997-05-06 | webdist CGI program (webdist.cgi) in SGI IRIX allows remote attackers to execute arbitrary commands via shell metacharacters in the distloc parameter. |
CVE-1999-1116 | | 1997-05-03 | Vulnerability in runpriv in Indigo Magic System Administration subsystem of SGI IRIX 6.3 and 6.4 allows local users to gain root privileges. | |
CVE-1999-0040 | | 1997-05-01 | Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges. | |
CVE-1999-0038 | High | 8.4 | 1997-04-26 | Buffer overflow in xlock program allows local users to execute commands as root. |
CVE-1999-0149 | | 1997-04-19 | The wrap CGI program in IRIX allows remote attackers to view arbitrary directory listings via a .. (dot dot) attack. | |
CVE-1999-0959 | | 1997-02-01 | IRIX startmidi program allows local users to modify arbitrary files via a symlink attack. | |
CVE-1999-0049 | | 1997-01-08 | Csetup under IRIX allows arbitrary file creation or overwriting. | |
CVE-1999-0051 | | 1997-01-06 | Arbitrary file creation and program execution using FLEXlm LicenseManager, from versions 4.0 to 5.0, in IRIX. | |
CVE-1999-1120 | | 1997-01-04 | netprint in SGI IRIX 6.4 and earlier trusts the PATH environmental variable for finding and executing the disable program, which allows local users to gain pri… | |
CVE-1999-1401 | | 1996-12-05 | Vulnerability in Desktop searchbook program in IRIX 5.0.x through 6.2 sets insecure permissions for certain user files (iconbook and searchbook). | |
CVE-1999-0044 | | 1996-12-03 | fsdump command in IRIX allows local users to obtain root access by modifying sensitive files. | |
CVE-1999-1384 | | 1996-10-30 | Indigo Magic System Tour in the SGI system tour package (systour) for IRIX 5.x through 6.3 allows local users to gain root privileges via a Trojan horse .exito… | |
CVE-1999-0032 | | 1996-10-25 | Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) comma… | |
CVE-1999-0234 | | 1996-10-08 | Bash treats any character with a value of 255 as a command separator. | |
CVE-1999-0022 | High | 7.8 | 1996-07-03 | Local user gains root privileges via buffer overflow in rdist, via expstr() function. |
CVE-1999-0019 | | 1996-04-24 | Delete or create a file via rpc.statd, due to invalid information. | |
CVE-1999-0078 | | 1996-04-18 | pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call. | |
CVE-1999-1319 | | 1996-01-03 | Vulnerability in object server program in SGI IRIX 5.2 through 6.1 allows remote attackers to gain root privileges in certain configurations. | |
CVE-1999-0208 | | 1995-12-12 | rpc.ypupdated (NIS) allows remote users to execute arbitrary commands. | |
CVE-1999-0241 | | 1995-11-01 | Guessable magic cookies in X Windows allows remote attackers to execute commands, e.g. through xterm. | |
CVE-1999-0073 | | 1995-10-13 | Telnet allows a remote client to specify environment variables including LD_LIBRARY_PATH, allowing an attacker to bypass the normal system libraries and gain r… | |
CVE-1999-1243 | | 1995-03-03 | SGI Desktop Permissions Tool in IRIX 6.0.1 and earlier allows local users to modify permissions for arbitrary files and gain privileges. | |
CVE-1999-1022 | | 1994-10-02 | serial_ports administrative program in IRIX 4.x and 5.x trusts the user's PATH environmental variable to find and execute the ls program, which allows local us… | |
CVE-1999-1219 | | 1994-08-11 | Vulnerability in sgihelp in the SGI help system and print manager in IRIX 5.2 and earlier allows local users to gain root privileges, possibly through the clog… | |
CVE-1999-1494 | | 1994-08-09 | colorview in Silicon Graphics IRIX 5.1, 5.2, and 6.0 allows local attackers to read arbitrary files via the -text argument. | |
CVE-1999-1468 | | 1991-10-22 | rdist in various UNIX systems uses popen to execute sendmail, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator)… | |
CVE-1999-1554 | | 1990-10-31 | /usr/sbin/Mail on SGI IRIX 3.3 and 3.3.1 does not properly set the group ID to the group ID of the user who started Mail, which allows local users to read the… |