Sgi Irix vulnerabilities

CVE-2000-0798 [CRITICAL] CVE-2000-0798: The truncate function in IRIX 6.x does not properly check for privileges when the file is in the xfs The truncate function in IRIX 6.x does not properly check for privileges when the file is in the xfs file system, which allows local users to delete the contents of arbitrary files.

CVE-1999-0765 [CRITICAL] CVE-1999-0765: SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor. SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor.

CVE-2005-2925 [HIGH] CVE-2005-2925: runpriv in SGI IRIX allows local users to bypass intended restrictions and execute arbitrary command runpriv in SGI IRIX allows local users to bypass intended restrictions and execute arbitrary commands via shell metacharacters in a command line for a privileged binary in /usr/sysadm/privbin.

CVE-1999-0149 [HIGH] CVE-1999-0149: The wrap CGI program in IRIX allows remote attackers to view arbitrary directory listings via a .. ( The wrap CGI program in IRIX allows remote attackers to view arbitrary directory listings via a .. (dot dot) attack.

CVE-2001-0485 [HIGH] CVE-2001-0485: Unknown vulnerability in netprint in IRIX 6.2, and possibly other versions, allows local users with Unknown vulnerability in netprint in IRIX 6.2, and possibly other versions, allows local users with lp privileges attacker to execute arbitrary commands via the -n option.

CVE-1999-1384 [HIGH] CVE-1999-1384: Indigo Magic System Tour in the SGI system tour package (systour) for IRIX 5.x through 6.3 allows lo Indigo Magic System Tour in the SGI system tour package (systour) for IRIX 5.x through 6.3 allows local users to gain root privileges via a Trojan horse .exitops program, which is called by the inst command that is executed by the RemoveSystemTour program.

CVE-1999-1219 [HIGH] CVE-1999-1219: Vulnerability in sgihelp in the SGI help system and print manager in IRIX 5.2 and earlier allows loc Vulnerability in sgihelp in the SGI help system and print manager in IRIX 5.2 and earlier allows local users to gain root privileges, possibly through the clogin command.

CVE-2000-0795 [HIGH] CVE-2000-0795: Buffer overflow in lpstat in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long Buffer overflow in lpstat in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long -n option.

CVE-2000-0796 [HIGH] CVE-2000-0796: Buffer overflow in dmplay in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long Buffer overflow in dmplay in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long command line option.

CVE-1999-1114 [HIGH] CVE-1999-1114: Buffer overflow in Korn Shell (ksh) suid_exec program on IRIX 6.x and earlier, and possibly other op Buffer overflow in Korn Shell (ksh) suid_exec program on IRIX 6.x and earlier, and possibly other operating systems, allows local users to gain root privileges.

CVE-1999-1399 [HIGH] CVE-1999-1399: spaceball program in SpaceWare 7.3 v1.0 in IRIX 6.2 allows local users to gain root privileges by se spaceball program in SpaceWare 7.3 v1.0 in IRIX 6.2 allows local users to gain root privileges by setting the HOSTNAME environmental variable to contain the commands to be executed.

CVE-1999-0948 [HIGH] CVE-1999-0948: Buffer overflow in uum program for Canna input system allows local users to gain root privileges. Buffer overflow in uum program for Canna input system allows local users to gain root privileges.

CVE-1999-0949 [HIGH] CVE-1999-0949: Buffer overflow in canuum program for Canna input system allows local users to gain root privileges. Buffer overflow in canuum program for Canna input system allows local users to gain root privileges.

CVE-1999-0040 [HIGH] CVE-1999-0040: Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.

CVE-1999-0314 [HIGH] CVE-1999-0314: ioconfig on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative ioconfig on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames.

CVE-1999-0328 [HIGH] CVE-1999-0328: SGI permissions program allows local users to gain root privileges. SGI permissions program allows local users to gain root privileges.

CVE-1999-0038 [HIGH] CWE-120 CVE-1999-0038: Buffer overflow in xlock program allows local users to execute commands as root. Buffer overflow in xlock program allows local users to execute commands as root.

CVE-2000-0797 [HIGH] CVE-2000-0797: Buffer overflow in gr_osview in IRIX 6.2 and 6.3 allows local users to gain privileges via a long -D Buffer overflow in gr_osview in IRIX 6.2 and 6.3 allows local users to gain privileges via a long -D option.

CVE-1999-0032 [HIGH] CVE-1999-0032: Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option.

CVE-2000-0794 [HIGH] CVE-2000-0794: Buffer overflow in IRIX libgl.so library allows local users to gain root privileges via a long HOME Buffer overflow in IRIX libgl.so library allows local users to gain root privileges via a long HOME variable to programs such as (1) gmemusage and (2) gr_osview.