Sgi Irix — known CVE vulnerabilities

Every CVE whose affected-product data names Sgi Irix, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (182)

• CVE-1999-0765 — CVSS 10.0 (critical): SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor.
• CVE-1999-0692 — CVSS 10.0 (critical): The default configuration of the Array Services daemon (arrayd) disables authentication, allowing remote users to gain root privileges.
• CVE-1999-0461 — CVSS 10.0 (critical): Versions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to insert and delete entries by spoofing a…
• CVE-2010-1039 — CVSS 10.0 (critical): Format string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and earlier; IBM VIOS 2.1, 1.5, and earlier…
• CVE-1999-0018 — CVSS 10.0 (critical): Buffer overflow in statd allows root privileges.
• CVE-2000-1220 — CVSS 10.0 (critical): The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing…
• CVE-1999-0208 — CVSS 10.0 (critical): rpc.ypupdated (NIS) allows remote users to execute arbitrary commands.
• CVE-2000-0844 — CVSS 10.0 (critical): Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local…
• CVE-2000-0798 — CVSS 10.0 (critical): The truncate function in IRIX 6.x does not properly check for privileges when the file is in the xfs file system, which allows local users…
• CVE-1999-0241 — CVSS 10.0 (critical): Guessable magic cookies in X Windows allows remote attackers to execute commands, e.g. through xterm.
• CVE-2000-0733 — CVSS 10.0 (critical): Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to…
• CVE-2000-0245 — CVSS 10.0 (critical): Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts.
• CVE-1999-1319 — CVSS 10.0 (critical): Vulnerability in object server program in SGI IRIX 5.2 through 6.1 allows remote attackers to gain root privileges in certain…
• CVE-2004-0139 — CVSS 10.0 (critical): Unknown vulnerability in the bsd.a kernel networking for SGI IRIX 6.5.22 through 6.5.25, and possibly earlier versions, in which "t_unbind…
• CVE-2003-0694 — CVSS 10.0 (critical): The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated…
• CVE-1999-0003 — CVSS 10.0 (critical): Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd).
• CVE-2003-0575 — CVSS 10.0 (critical): Heap-based buffer overflow in the name services daemon (nsd) in SGI IRIX 6.5.x through 6.5.21f, and possibly earlier versions, allows…
• CVE-2003-0473 — CVSS 10.0 (critical): Unknown vulnerability in the IPv6 capability in IRIX 6.5.19 causes snoop to process packets as the root user, with unknown implications.
• CVE-2002-1584 — CVSS 10.0 (critical): Unknown vulnerability in the AUTH_DES authentication for RPC in Solaris 2.5.1, 2.6, and 7, SGI IRIX 6.5 to 6.5.19f, and possibly other…
• CVE-2002-1318 — CVSS 10.0 (critical): Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via…
• CVE-2002-0359 — CVSS 10.0 (critical): xfsmd for IRIX 6.5 through 6.5.16 uses weak authentication, which allows remote attackers to call dangerous RPC functions, including those…
• CVE-2001-0800 — CVSS 10.0 (critical): lpsched in IRIX 6.5.13f and earlier allows remote attackers to execute arbitrary commands via shell metacharacters.
• CVE-2001-0799 — CVSS 10.0 (critical): Buffer overflows in lpsched in IRIX 6.5.13f and earlier allow remote attackers to execute arbitrary commands via a long argument.
• CVE-2001-0797 — CVSS 10.0 (critical): Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large…
• CVE-2001-0554 — CVSS 10.0 (critical): Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a…
• CVE-1999-0073 — CVSS 10.0 (critical): Telnet allows a remote client to specify environment variables including LD_LIBRARY_PATH, allowing an attacker to bypass the normal system…
• CVE-2001-0247 — CVSS 10.0 (critical): Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {}…
• CVE-2000-1221 — CVSS 10.0 (critical): The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved…
• CVE-1999-0009 — CVSS 10.0 (critical): Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.
• CVE-2003-0174 — CVSS 9.8 (critical): The LDAP name service (nsd) in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been provided by an LDAP…
• CVE-2001-0249 — CVSS 9.8 (critical): Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the…
• CVE-2001-0248 — CVSS 9.8 (critical): Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the…
• CVE-1999-0038 — CVSS 8.4 (high): Buffer overflow in xlock program allows local users to execute commands as root.
• CVE-1999-0036 — CVSS 8.4 (high): IRIX login program with a nonzero LOCKOUT parameter allows creation or damage to files.
• CVE-1999-0029 — CVSS 8.4 (high): root privileges via buffer overflow in ordist command on SGI IRIX systems.
• CVE-1999-0022 — CVSS 7.8 (high): Local user gains root privileges via buffer overflow in rdist, via expstr() function.
• CVE-1999-1183 — CVSS 7.6 (high): System Manager sysmgr GUI in SGI IRIX 6.4 and 6.3 allows remote attackers to execute commands by providing a trojan horse (1) runtask or…
• CVE-2007-4938 — CVSS 7.6 (high): Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service…
• CVE-2003-0680 — CVSS 7.5 (high): Unknown vulnerability in NFS for SGI IRIX 6.5.21 and earlier may allow an NFS client to bypass read-only restrictions.
• CVE-1999-0148 — CVSS 7.5 (high): The handler CGI program in IRIX allows arbitrary command execution.
• CVE-1999-0149 — CVSS 7.5 (high): The wrap CGI program in IRIX allows remote attackers to view arbitrary directory listings via a .. (dot dot) attack.
• CVE-2000-0207 — CVSS 7.5 (high): SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters.
• CVE-2001-0331 — CVSS 7.5 (high): Buffer overflow in Embedded Support Partner (ESP) daemon (rpc.espd) in IRIX 6.5.8 and earlier allows remote attackers to execute arbitrary…
• CVE-2001-1456 — CVSS 7.5 (high): Buffer overflow in the (1) smap/smapd and (2) CSMAP daemons for Gauntlet Firewall 5.0 through 6.0 allows remote attackers to execute…
• CVE-2002-0017 — CVSS 7.5 (high): Buffer overflow in SNMP daemon (snmpd) on SGI IRIX 6.5 through 6.5.15m allows remote attackers to execute arbitrary code via an SNMP…
• CVE-2002-0652 — CVSS 7.5 (high): xfsmd for IRIX 6.5 through 6.5.16 allows remote attackers to execute arbitrary code via shell metacharacters that are not properly filtered…
• CVE-2002-0677 — CVSS 7.5 (high): CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain…
• CVE-2002-1317 — CVSS 7.5 (high): Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of…
• CVE-2002-1419 — CVSS 7.5 (high): The upgrade of IRIX on Origin 3000 to 6.5.13 through 6.5.16 changes the MAC address of the system, which could modify intended access…
• CVE-2003-0028 — CVSS 7.5 (high): Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived…
• CVE-2003-0064 — CVSS 7.5 (high): The dtterm terminal emulator allows attackers to modify the window title via a certain character escape sequence and then insert it back to…
• CVE-2003-0683 — CVSS 7.5 (high): NFS in SGI 6.5.21m and 6.5.21f does not perform access checks in certain configurations when an /etc/exports entry uses wildcards without…
• CVE-2003-0796 — CVSS 7.5 (high): Unknown vulnerability in rpc.mountd SGI IRIX 6.5.18 through 6.5.22 allows remote attackers to mount from unprivileged ports even with the…
• CVE-2005-0138 — CVSS 7.5 (high): rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not correctly allow access to anonymous clients that connect from a system whose…
• CVE-2005-0139 — CVSS 7.5 (high): Unknown vulnerability in rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not sufficiently restrict access rights for read-mostly…
• CVE-1999-0039 — CVSS 7.3 (high): webdist CGI program (webdist.cgi) in SGI IRIX allows remote attackers to execute arbitrary commands via shell metacharacters in the distloc…
• CVE-1999-0059 — CVSS 7.3 (high): IRIX fam service allows an attacker to obtain a list of all files on the server.
• CVE-1999-1181 — CVSS 7.2 (high): Vulnerability in On-Line Customer Registration software for IRIX 6.2 through 6.4 allows local users to gain root privileges.
• CVE-1999-1116 — CVSS 7.2 (high): Vulnerability in runpriv in Indigo Magic System Administration subsystem of SGI IRIX 6.3 and 6.4 allows local users to gain root privileges.
• CVE-1999-1143 — CVSS 7.2 (high): Vulnerability in runtime linker program rld in SGI IRIX 6.x and earlier allows local users to gain privileges via setuid and setgid…
• CVE-1999-1219 — CVSS 7.2 (high): Vulnerability in sgihelp in the SGI help system and print manager in IRIX 5.2 and earlier allows local users to gain root privileges…
• CVE-1999-1232 — CVSS 7.2 (high): Untrusted search path vulnerability in day5datacopier in SGI IRIX 6.2 allows local users to execute arbitrary commands via a modified PATH…
• CVE-1999-1272 — CVSS 7.2 (high): Buffer overflows in CDROM Confidence Test program (cdrom) allow local users to gain root privileges.
• CVE-1999-1286 — CVSS 7.2 (high): addnetpr in SGI IRIX 6.2 and earlier allows local users to modify arbitrary files and possibly gain root access via a symlink attack on a…
• CVE-1999-0314 — CVSS 7.2 (high): ioconfig on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames.
• CVE-1999-1384 — CVSS 7.2 (high): Indigo Magic System Tour in the SGI system tour package (systour) for IRIX 5.x through 6.3 allows local users to gain root privileges via a…
• CVE-1999-1399 — CVSS 7.2 (high): spaceball program in SpaceWare 7.3 v1.0 in IRIX 6.2 allows local users to gain root privileges by setting the HOSTNAME environmental…
• CVE-1999-1461 — CVSS 7.2 (high): inpview in InPerson on IRIX 5.3 through IRIX 6.5.10 trusts the PATH environmental variable to find and execute the ttsession program, which…
• CVE-1999-1492 — CVSS 7.2 (high): Vulnerability in (1) diskperf and (2) diskalign in IRIX 6.4 allows local attacker to create arbitrary root owned files, leading to root…
• CVE-2000-0013 — CVSS 7.2 (high): IRIX soundplayer program allows local users to gain privileges by including shell metacharacters in a .wav file, which is executed via the…
• CVE-1999-0313 — CVSS 7.2 (high): disk_bandwidth on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames.
• CVE-2000-0794 — CVSS 7.2 (high): Buffer overflow in IRIX libgl.so library allows local users to gain root privileges via a long HOME variable to programs such as (1)…
• CVE-2000-0795 — CVSS 7.2 (high): Buffer overflow in lpstat in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long -n option.
• CVE-2000-0796 — CVSS 7.2 (high): Buffer overflow in dmplay in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long command line option.
• CVE-2000-0797 — CVSS 7.2 (high): Buffer overflow in gr_osview in IRIX 6.2 and 6.3 allows local users to gain privileges via a long -D option.
• CVE-1999-0108 — CVSS 7.2 (high): The printers program in IRIX has a buffer overflow that gives root access to local users.
• CVE-2001-0485 — CVSS 7.2 (high): Unknown vulnerability in netprint in IRIX 6.2, and possibly other versions, allows local users with lp privileges attacker to execute…
• CVE-1999-0051 — CVSS 7.2 (high): Arbitrary file creation and program execution using FLEXlm LicenseManager, from versions 4.0 to 5.0, in IRIX.
• CVE-1999-0049 — CVSS 7.2 (high): Csetup under IRIX allows arbitrary file creation or overwriting.
• CVE-1999-0044 — CVSS 7.2 (high): fsdump command in IRIX allows local users to obtain root access by modifying sensitive files.
• CVE-2001-0801 — CVSS 7.2 (high): lpstat in IRIX 6.5.13f and earlier allows local users to gain root privileges by specifying a Trojan Horse nettype shared library.
• CVE-2002-0173 — CVSS 7.2 (high): Buffer overflow in cpr for the eoe.sw.cpr SGI Checkpoint-Restart Software package on SGI IRIX 6.5.10 and earlier may allow local users to…
• CVE-2002-0174 — CVSS 7.2 (high): nsd on SGI IRIX before 6.5.11 allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the nsd.dump…
• CVE-2002-0356 — CVSS 7.2 (high): Vulnerability in XFS filesystem reorganizer (fsr_xfs) in SGI IRIX 6.5.10 and earlier allows local users to gain root privileges by…
• CVE-2002-0357 — CVSS 7.2 (high): Unknown vulnerability in rpc.passwd in the nfs.sw.nis subsystem of SGI IRIX 6.5.15 and earlier allows local users to gain root privileges.
• CVE-1999-0040 — CVSS 7.2 (high): Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.
• CVE-2002-0631 — CVSS 7.2 (high): Unknown vulnerability in nveventd in NetVisualyzer on SGI IRIX 6.5 through 6.5.16 allows local users to write arbitrary files and gain root…
• CVE-2002-0678 — CVSS 7.2 (high): CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file…
• CVE-2005-0113 — CVSS 7.2 (high): inpview in SGI IRIX allows local users to execute arbitrary commands via the SUN_TTSESSION_CMD environment variable, which is executed by…
• CVE-1999-0025 — CVSS 7.2 (high): root privileges via buffer overflow in df command on SGI IRIX systems.
• CVE-2003-0173 — CVSS 7.2 (high): xfsdq in xfsdump does not create quota information files securely, which allows local users to gain root privileges.
• CVE-1999-0033 — CVSS 7.2 (high): Command execution in Sun systems via buffer overflow in the at program.
• CVE-1999-0032 — CVSS 7.2 (high): Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C…
• CVE-2003-0574 — CVSS 7.2 (high): Unknown vulnerability in SGI IRIX 6.5.x through 6.5.20, and possibly earlier versions, allows local users to cause a core dump in scheme…
• CVE-1999-0030 — CVSS 7.2 (high): root privileges via buffer overflow in xlock command on SGI IRIX systems.
• CVE-1999-0028 — CVSS 7.2 (high): root privileges via buffer overflow in login/scheme command on SGI IRIX systems.
• CVE-1999-0027 — CVSS 7.2 (high): root privileges via buffer overflow in eject command on SGI IRIX systems.
• CVE-2005-2925 — CVSS 7.2 (high): runpriv in SGI IRIX allows local users to bypass intended restrictions and execute arbitrary commands via shell metacharacters in a command…
• CVE-2004-0135 — CVSS 7.2 (high): The syssgi SGI_IOPROBE system call in IRIX 6.5.20 through 6.5.24 allows local users to gain privileges by reading and writing to kernel…
• CVE-1999-0413 — CVSS 7.2 (high): A buffer overflow in the SGI X server allows local users to gain root access through the X server font path.
• CVE-1999-0329 — CVSS 7.2 (high): SGI mediad program allows local users to gain root access.
• CVE-1999-0328 — CVSS 7.2 (high): SGI permissions program allows local users to gain root privileges.
• CVE-1999-0948 — CVSS 7.2 (high): Buffer overflow in uum program for Canna input system allows local users to gain root privileges.
• CVE-1999-0949 — CVSS 7.2 (high): Buffer overflow in canuum program for Canna input system allows local users to gain root privileges.
• CVE-1999-0959 — CVSS 7.2 (high): IRIX startmidi program allows local users to modify arbitrary files via a symlink attack.
• CVE-1999-0960 — CVSS 7.2 (high): IRIX cdplayer allows local users to create directories in arbitrary locations via a command line option.
• CVE-1999-1039 — CVSS 7.2 (high): Vulnerability in (1) diskalign and (2) diskperf in IRIX 6.4 patches 2291 and 2848 allow a local user to create root-owned files leading to…
• CVE-1999-1040 — CVSS 7.2 (high): Vulnerabilities in (1) ipxchk and (2) ipxlink in NetWare Client 1.0 on IRIX 6.3 and 6.4 allows local users to gain root access via a…
• CVE-1999-1114 — CVSS 7.2 (high): Buffer overflow in Korn Shell (ksh) suid_exec program on IRIX 6.x and earlier, and possibly other operating systems, allows local users to…
• CVE-1999-0215 — CVSS 6.4 (medium): Routed allows attackers to append data to files.
• CVE-1999-1485 — CVSS 6.4 (medium): nsd in IRIX 6.5 through 6.5.2 exports a virtual filesystem on a UDP port, which allows remote attackers to view files and cause a possible…
• CVE-2000-0283 — CVSS 6.4 (medium): The default installation of IRIX Performance Copilot allows remote attackers to access sensitive system information via the pmcd daemon.
• CVE-1999-1410 — CVSS 6.2 (medium): addnetpr in IRIX 5.3 and 6.2 allows local users to overwrite arbitrary files and possibly gain root privileges via a symlink attack on the…
• CVE-1999-1398 — CVSS 6.2 (medium): Vulnerability in xfsdump in SGI IRIX may allow local users to obtain root privileges via the bck.log log file, possibly via a symlink…
• CVE-1999-1022 — CVSS 6.2 (medium): serial_ports administrative program in IRIX 4.x and 5.x trusts the user's PATH environmental variable to find and execute the ls program…
• CVE-1999-1468 — CVSS 6.2 (medium): rdist in various UNIX systems uses popen to execute sendmail, which allows local users to gain root privileges by modifying the IFS…
• CVE-1999-0035 — CVSS 5.4 (medium): Race condition in signal handling routine in ftpd, allowing read/write arbitrary files.
• CVE-2004-1889 — CVSS 5.0 (medium): Unknown vulnerability in ftpd in SGI IRIX 6.5.20 through 6.5.23 allows remote attackers to cause a denial of service (hang) via a link…
• CVE-2004-1891 — CVSS 5.0 (medium): The ftp_syslog function in ftpd in SGI IRIX 6.5.20 "doesn't work with anonymous FTP," which has an unknown impact, possibly preventing the…
• CVE-2002-0038 — CVSS 5.0 (medium): Vulnerability in the cache-limiting function of the unified name service daemon (nsd) in IRIX 6.5.4 through 6.5.11 allows remote attackers…
• CVE-2002-0039 — CVSS 5.0 (medium): rpcbind in SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, allows remote attackers to cause a denial of service (crash) via…
• CVE-2002-0041 — CVSS 5.0 (medium): Unknown vulnerability in Mail for SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, when running with the -R option, allows…
• CVE-2003-0573 — CVSS 5.0 (medium): The DNS callbacks in nsd in SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, do not perform sufficient sanity checking, with…
• CVE-2003-0576 — CVSS 5.0 (medium): Unknown vulnerability in the NFS daemon (nfsd) in SGI IRIX 6.5.19f and earlier allows remote attackers to cause a denial of service (kernel…
• CVE-2002-0632 — CVSS 5.0 (medium): Vulnerability in SGI BDS (Bulk Data Service) BDSPro 2.4 and earlier allows clients to read arbitrary files on a BDS server.
• CVE-2004-2002 — CVSS 5.0 (medium): Unknown vulnerability in SGI IRIX 6.5 through 6.5.22m allows remote attackers to cause a denial of service via a certain UDP packet.
• CVE-2002-1265 — CVSS 5.0 (medium): The Sun RPC functionality in multiple libc implementations does not provide a time-out mechanism when reading data from TCP connections…
• CVE-2003-0688 — CVSS 5.0 (medium): The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initialize certain data structures…
• CVE-1999-0270 — CVSS 5.0 (medium): Directory traversal vulnerability in pfdispaly.cgi program (sometimes referred to as "pfdisplay") for SGI's Performer API Search Tool…
• CVE-1999-0019 — CVSS 5.0 (medium): Delete or create a file via rpc.statd, due to invalid information.
• CVE-2003-0797 — CVSS 5.0 (medium): Unknown vulnerability in rpc.mountd in SGI IRIX 6.5 through 6.5.22 allows remote attackers to cause a denial of service (process death) via…
• CVE-2000-0893 — CVSS 5.0 (medium): The presence of the Distributed GL Daemon (dgld) service on port 5232 on SGI IRIX systems allows remote attackers to identify the target…
• CVE-2000-1193 — CVSS 5.0 (medium): Performance Metrics Collector Daemon (PMCD) in Performance Copilot in IRIX 6.x allows remote attackers to cause a denial of service…
• CVE-1999-0195 — CVSS 5.0 (medium): Denial of service in RPC portmapper allows attackers to register or unregister RPC services or spoof RPC services using a spoofed source IP…
• CVE-1999-0083 — CVSS 5.0 (medium): getcwd() file descriptor leak in FTP.
• CVE-2004-0483 — CVSS 5.0 (medium): Unknown vulnerability in rpc.mountd for SGI IRIX 6.5.24 allows remote attackers to cause a denial of service (infinite loop) via certain…
• CVE-2003-0176 — CVSS 5.0 (medium): The Name Service Daemon (nsd), when running on an NIS master on SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, allows…
• CVE-1999-1131 — CVSS 5.0 (medium): Buffer overflow in OSF Distributed Computing Environment (DCE) security demon (secd) in IRIX 6.4 and earlier allows attackers to cause a…
• CVE-2001-0796 — CVSS 5.0 (medium): SGI IRIX 6.5 through 6.5.12f and possibly earlier versions, and FreeBSD 3.0, allows remote attackers to cause a denial of service via a…
• CVE-2003-0472 — CVSS 5.0 (medium): The IPv6 capability in IRIX 6.5.19 allows remote attackers to cause a denial of service (hang) in inetd via port scanning.
• CVE-1999-1067 — CVSS 5.0 (medium): SGI MachineInfo CGI program, installed by default on some web servers, prints potentially sensitive system status information, which could…
• CVE-2003-0572 — CVSS 5.0 (medium): Unknown vulnerability in nsd in SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, allows attackers to cause a denial of…
• CVE-2002-2185 — CVSS 4.9 (medium): The Internet Group Management Protocol (IGMP) allows local users to cause a denial of service via an IGMP membership report to a target's…
• CVE-1999-0125 — CVSS 4.6 (medium): Buffer overflow in SGI IRIX mailx program.
• CVE-1999-0026 — CVSS 4.6 (medium): root privileges via buffer overflow in pset command on SGI IRIX systems.
• CVE-1999-0234 — CVSS 4.6 (medium): Bash treats any character with a value of 255 as a command separator.
• CVE-2004-2001 — CVSS 4.6 (medium): ifconfig "-arp" in SGI IRIX 6.5 through 6.5.22m does not properly disable ARP requests from being sent or received.
• CVE-2002-1517 — CVSS 4.6 (medium): fsr_efs in IRIX 6.5 allows local users to conduct unauthorized file activities via a symlink attack, possibly via the .fsrlast file.
• CVE-2002-1323 — CVSS 4.6 (medium): Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or…
• CVE-1999-1243 — CVSS 4.6 (medium): SGI Desktop Permissions Tool in IRIX 6.0.1 and earlier allows local users to modify permissions for arbitrary files and gain privileges.
• CVE-2002-1516 — CVSS 4.6 (medium): rpcbind in SGI IRIX, when using the -w command line switch, allows local users to overwrite arbitrary files via a symlink attack.
• CVE-2002-1787 — CVSS 4.6 (medium): Buffer overflow in uux in eoe.sw.uucp package of SGI IRIX 6.5 through 6.5.17 allows local users to execute arbitrary code via unknown…
• CVE-1999-1501 — CVSS 4.6 (medium): (1) ipxchk and (2) ipxlink in SGI OS2 IRIX 6.3 does not properly clear the IFS environmental variable before executing system calls, which…
• CVE-2003-0177 — CVSS 4.6 (medium): SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, does not follow "-" entries in the /etc/group file, which may cause…
• CVE-1999-1120 — CVSS 4.6 (medium): netprint in SGI IRIX 6.4 and earlier trusts the PATH environmental variable for finding and executing the disable program, which allows…
• CVE-1999-1401 — CVSS 4.6 (medium): Vulnerability in Desktop searchbook program in IRIX 5.0.x through 6.2 sets insecure permissions for certain user files (iconbook and…
• CVE-1999-0524 — CVSS 4.0 (medium): ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.
• CVE-2000-0799 — CVSS 3.7 (low): inpview in InPerson in SGI IRIX 5.3 through IRIX 6.5.10 allows local users to gain privileges via a symlink attack on the .ilmpAAA…
• CVE-2000-0579 — CVSS 3.7 (low): IRIX crontab creates temporary files with predictable file names and with the umask of the user, which could allow local users to modify…
• CVE-2002-1518 — CVSS 3.6 (low): mv in IRIX 6.5 creates a directory with world-writable permissions while moving a directory, which could allow local users to modify files…
• CVE-1999-0327 — CVSS 2.1 (low): SGI syserr program allows local users to corrupt files.
• CVE-1999-1214 — CVSS 2.1 (low): The asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of I/O notification, which…
• CVE-2003-0679 — CVSS 2.1 (low): Unknown vulnerability in the libcpr library for the Checkpoint/Restart (cpr) system on SGI IRIX 6.5.21f and earlier allows local users to…
• CVE-2002-1786 — CVSS 2.1 (low): SGI IRIX 6.5 through 6.5.14 applies a umask of 022 to root core dumps, which allows local users to read the core dumps and possibly obtain…
• CVE-1999-1409 — CVSS 2.1 (low): The at program in IRIX 6.2 and NetBSD 1.3.2 and earlier allows local users to read portions of arbitrary files by submitting the file to at…
• CVE-2002-0355 — CVSS 2.1 (low): netstat in SGI IRIX before 6.5.12 allows local users to determine the existence of files on the system, even if the users do not have the…
• CVE-2002-0213 — CVSS 2.1 (low): xkas in Xinet K-AShare 0.011.01 for IRIX allows local users to read arbitrary files via a symlink attack on the VOLICON file, which is…
• CVE-2004-0136 — CVSS 2.1 (low): The mapelf32exec function call in IRIX 6.5.20 through 6.5.24 allows local users to cause a denial of service (system crash) via a…
• CVE-2002-1791 — CVSS 2.1 (low): SGI IRIX 6.5 through 6.5.17 creates temporary desktop files with world-writable permissions, which allows local users to overwrite or…
• CVE-1999-1494 — CVSS 2.1 (low): colorview in Silicon Graphics IRIX 5.1, 5.2, and 6.0 allows local attackers to read arbitrary files via the -text argument.
• CVE-1999-1554 — CVSS 2.1 (low): /usr/sbin/Mail on SGI IRIX 3.3 and 3.3.1 does not properly set the group ID to the group ID of the user who started Mail, which allows…
• CVE-2002-2093 — CVSS 2.1 (low): The Video Control Panel on SGI O2/IRIX 6.5, when the Default Input is set to "Output Video", allows attackers to access a console session…
• CVE-2002-0172 — CVSS 2.1 (low): /dev/ipfilter on SGI IRIX 6.5 is installed by /dev/MAKEDEV with insecure default permissions (644), which could allow a local user to cause…
• CVE-2005-0464 — CVSS 2.1 (low): gr_osview in SGI IRIX 6.5.22, and possibly other 6.5 versions, does not drop privileges when opening description files while in debug mode…
• CVE-2002-0042 — CVSS 2.1 (low): Vulnerability in the XFS file system for SGI IRIX before 6.5.12 allows local users to cause a denial of service (hang) by creating a file…
• CVE-1999-1102 — CVSS 2.1 (low): lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files…
• CVE-2005-0465 — CVSS 2.1 (low): gr_osview in SGI IRIX does not drop privileges before opening files, which allows local users to overwrite arbitrary files via the -s…
• CVE-2002-0875 — CVSS 2.1 (low): Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to…
• CVE-2002-0040 — CVSS 2.1 (low): Vulnerability in SGI IRIX 6.5.11 through 6.5.15f allows local users to cause privileged applications to dump core via the HOSTALIASES…
• CVE-2003-0175 — CVSS 2.1 (low): SGI IRIX before 6.5.21 allows local users to cause a denial of service (kernel panic) via a certain call to the PIOCSWATCH ioctl.
• CVE-2004-0137 — CVSS 2.1 (low): Unknown vulnerability in init for IRIX 6.5.20 through 6.5.24 allows local users to cause a denial of service (system panic) as a result of…
• CVE-1999-0078 — CVSS 1.9 (low): pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call.