CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register   Reset Password   Activate Account
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

SGI » Irix : Security Vulnerabilities (CVSS score between 7 and 7.99)

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Copy Results Download Results Select Table
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2007-4938 119 DoS Exec Code Overflow 2007-09-18 2008-11-15
7.6
 Admin Remote High Not required Complete Complete Complete
Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values, and a certain wLongsPerEntry value.
2 CVE-2005-2925 Exec Code Bypass 2005-10-12 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
runpriv in SGI IRIX allows local users to bypass intended restrictions and execute arbitrary commands via shell metacharacters in a command line for a privileged binary in /usr/sysadm/privbin.
3 CVE-2005-0139 2005-09-21 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Unknown vulnerability in rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not sufficiently restrict access rights for read-mostly exports, which allows attackers to conduct unauthorized activities.
4 CVE-2005-0138 2005-09-21 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not correctly allow access to anonymous clients that connect from a system whose hostname can not be determined. NOTE: while this issue occurs in a security mechanism, there is no apparent attacker role and probably does not satisfy the CVE definition of a vulnerability.
5 CVE-2005-0113 Exec Code 2005-01-14 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
inpview in SGI IRIX allows local users to execute arbitrary commands via the SUN_TTSESSION_CMD environment variable, which is executed by inpview without dropping privileges.
6 CVE-2004-0135 +Priv 2004-08-06 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
The syssgi SGI_IOPROBE system call in IRIX 6.5.20 through 6.5.24 allows local users to gain privileges by reading and writing to kernel memory.
7 CVE-2004-0134 +Priv 2004-08-18 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
cpr (libcpr) in SGI IRIX before 6.5.25 allows local users to gain privileges by loading a user provided library while restarting the checkpointed process.
8 CVE-2003-0796 2004-03-29 2008-09-05
7.5
 User Remote Low Not required Partial Partial Partial
Unknown vulnerability in rpc.mountd SGI IRIX 6.5.18 through 6.5.22 allows remote attackers to mount from unprivileged ports even with the -n option disabled.
9 CVE-2003-0683 Bypass 2003-11-03 2008-09-05
7.5
 User Remote Low Not required Partial Partial Partial
NFS in SGI 6.5.21m and 6.5.21f does not perform access checks in certain configurations when an /etc/exports entry uses wildcards without any hostnames or groups, which could allow attackers to bypass intended restrictions.
10 CVE-2003-0680 Bypass 2003-10-06 2008-09-10
7.5
 User Remote Low Not required Partial Partial Partial
Unknown vulnerability in NFS for SGI IRIX 6.5.21 and earlier may allow an NFS client to bypass read-only restrictions.
11 CVE-2003-0574 +Priv 2003-08-18 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
Unknown vulnerability in SGI IRIX 6.5.x through 6.5.20, and possibly earlier versions, allows local users to cause a core dump in scheme and possibly gain privileges via certain environment variables, a different vulnerability than CVE-2001-0797 and CVE-1999-0028.
12 CVE-2003-0174 2003-05-12 2008-09-05
7.5
 User Remote Low Not required Partial Partial Partial
The LDAP name service (nsd) in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been provided by an LDAP server, which could allow attackers to log in without a password.
13 CVE-2003-0173 +Priv 2003-05-05 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
xfsdq in xfsdump does not create quota information files securely, which allows local users to gain root privileges.
14 CVE-2003-0064 Exec Code 2003-03-03 2008-09-10
7.5
 User Remote Low Not required Partial Partial Partial
The dtterm terminal emulator allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.
15 CVE-2003-0028 Exec Code Overflow 2003-03-25 2008-09-10
7.5
 User Remote Low Not required Partial Partial Partial
Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.
16 CVE-2002-1419 2003-04-11 2008-09-05
7.5
 User Remote Low Not required Partial Partial Partial
The upgrade of IRIX on Origin 3000 to 6.5.13 through 6.5.16 changes the MAC address of the system, which could modify intended access restrictions that are based on a MAC address.
17 CVE-2002-1317 DoS Exec Code Overflow 2002-12-11 2008-09-05
7.5
 User Remote Low Not required Partial Partial Partial
Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a certain XFS query.
18 CVE-2002-0678 2002-07-23 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC procedure.
19 CVE-2002-0677 +Priv 2002-07-23 2008-09-10
7.5
 User Remote Low Not required Partial Partial Partial
CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument in an AUTH_UNIX procedure call, which is used as a table index by the _TT_ISCLOSE procedure.
20 CVE-2002-0652 Exec Code 2002-07-03 2008-09-05
7.5
 User Remote Low Not required Partial Partial Partial
xfsmd for IRIX 6.5 through 6.5.16 allows remote attackers to execute arbitrary code via shell metacharacters that are not properly filtered from several calls to the popen() function, such as export_fs().
21 CVE-2002-0631 +Priv 2002-07-03 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
Unknown vulnerability in nveventd in NetVisualyzer on SGI IRIX 6.5 through 6.5.16 allows local users to write arbitrary files and gain root privileges.
22 CVE-2002-0357 +Priv 2002-06-18 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
Unknown vulnerability in rpc.passwd in the nfs.sw.nis subsystem of SGI IRIX 6.5.15 and earlier allows local users to gain root privileges.
23 CVE-2002-0356 +Priv 2002-05-29 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
Vulnerability in XFS filesystem reorganizer (fsr_xfs) in SGI IRIX 6.5.10 and earlier allows local users to gain root privileges by overwriting critical system files.
24 CVE-2002-0174 +Priv 2002-05-29 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
nsd on SGI IRIX before 6.5.11 allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the nsd.dump file.
25 CVE-2002-0173 Overflow +Priv 2002-05-16 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in cpr for the eoe.sw.cpr SGI Checkpoint-Restart Software package on SGI IRIX 6.5.10 and earlier may allow local users to gain root privileges.
26 CVE-2002-0017 Exec Code Overflow 2002-04-03 2008-09-05
7.5
 User Remote Low Not required Partial Partial Partial
Buffer overflow in SNMP daemon (snmpd) on SGI IRIX 6.5 through 6.5.15m allows remote attackers to execute arbitrary code via an SNMP request.
27 CVE-2001-1456 119 Exec Code Overflow 2001-09-04 2008-09-10
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in the (1) smap/smapd and (2) CSMAP daemons for Gauntlet Firewall 5.0 through 6.0 allows remote attackers to execute arbitrary code via a crafted mail message.
28 CVE-2001-0801 +Priv 2001-12-06 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
lpstat in IRIX 6.5.13f and earlier allows local users to gain root privileges by specifying a Trojan Horse nettype shared library.
29 CVE-2001-0485 Exec Code 2001-06-27 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Unknown vulnerability in netprint in IRIX 6.2, and possibly other versions, allows local users with lp privileges attacker to execute arbitrary commands via the -n option.
30 CVE-2001-0331 Exec Code Overflow 2001-06-27 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in Embedded Support Partner (ESP) daemon (rpc.espd) in IRIX 6.5.8 and earlier allows remote attackers to execute arbitrary commands.
31 CVE-2000-0797 Overflow +Priv 2000-10-20 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in gr_osview in IRIX 6.2 and 6.3 allows local users to gain privileges via a long -D option.
32 CVE-2000-0796 Overflow +Priv 2000-10-20 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in dmplay in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long command line option.
33 CVE-2000-0795 Overflow +Priv 2000-10-20 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in lpstat in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long -n option.
34 CVE-2000-0794 Overflow +Priv 2000-10-20 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in IRIX libgl.so library allows local users to gain root privileges via a long HOME variable to programs such as (1) gmemusage and (2) gr_osview.
35 CVE-2000-0207 Exec Code 2000-03-01 2008-09-10
7.5
 None Remote Low Not required Partial Partial Partial
SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters.
36 CVE-2000-0013 +Priv 1999-12-31 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
IRIX soundplayer program allows local users to gain privileges by including shell metacharacters in a .wav file, which is executed via the midikeys program.
37 CVE-1999-1492 1998-05-27 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Vulnerability in (1) diskperf and (2) diskalign in IRIX 6.4 allows local attacker to create arbitrary root owned files, leading to root privileges.
38 CVE-1999-1461 1997-05-07 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
inpview in InPerson on IRIX 5.3 through IRIX 6.5.10 trusts the PATH environmental variable to find and execute the ttsession program, which allows local users to obtain root access by modifying the PATH to point to a Trojan horse ttsession program.
39 CVE-1999-1399 Exec Code +Priv 1997-08-20 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
spaceball program in SpaceWare 7.3 v1.0 in IRIX 6.2 allows local users to gain root privileges by setting the HOSTNAME environmental variable to contain the commands to be executed.
40 CVE-1999-1384 Exec Code +Priv 1996-10-30 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Indigo Magic System Tour in the SGI system tour package (systour) for IRIX 5.x through 6.3 allows local users to gain root privileges via a Trojan horse .exitops program, which is called by the inst command that is executed by the RemoveSystemTour program.
41 CVE-1999-1286 1997-05-09 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
addnetpr in SGI IRIX 6.2 and earlier allows local users to modify arbitrary files and possibly gain root access via a symlink attack on a temporary file.
42 CVE-1999-1272 Overflow +Priv 1998-03-01 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflows in CDROM Confidence Test program (cdrom) allow local users to gain root privileges.
43 CVE-1999-1232 Exec Code 1997-05-16 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Untrusted search path vulnerability in day5datacopier in SGI IRIX 6.2 allows local users to execute arbitrary commands via a modified PATH environment variable that points to a malicious cp program.
44 CVE-1999-1219 +Priv 1994-08-11 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Vulnerability in sgihelp in the SGI help system and print manager in IRIX 5.2 and earlier allows local users to gain root privileges, possibly through the clogin command.
45 CVE-1999-1183 Exec Code 1998-04-02 2008-09-05
7.6
 Admin Remote High Not required Complete Complete Complete
System Manager sysmgr GUI in SGI IRIX 6.4 and 6.3 allows remote attackers to execute commands by providing a trojan horse (1) runtask or (2) runexec descriptor file, which is used to execute a System Manager Task when the user's Mailcap entry supports the x-sgi-task or x-sgi-exec type.
46 CVE-1999-1181 +Priv 1998-09-29 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Vulnerability in On-Line Customer Registration software for IRIX 6.2 through 6.4 allows local users to gain root privileges.
47 CVE-1999-1143 +Priv 1997-05-28 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Vulnerability in runtime linker program rld in SGI IRIX 6.x and earlier allows local users to gain privileges via setuid and setgid programs.
48 CVE-1999-1116 +Priv 1997-05-03 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Vulnerability in runpriv in Indigo Magic System Administration subsystem of SGI IRIX 6.3 and 6.4 allows local users to gain root privileges.
49 CVE-1999-1114 Overflow +Priv 1998-04-08 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in Korn Shell (ksh) suid_exec program on IRIX 6.x and earlier, and possibly other operating systems, allows local users to gain root privileges.
50 CVE-1999-1040 1998-04-08 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Vulnerabilities in (1) ipxchk and (2) ipxlink in NetWare Client 1.0 on IRIX 6.3 and 6.4 allows local users to gain root access via a modified IFS environmental variable.
Total number of vulnerabilities : 79   Page : 1 (This Page)2
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.