Sgi Irix vulnerabilities

CVE-1999-1181 [HIGH] CVE-1999-1181: Vulnerability in On-Line Customer Registration software for IRIX 6.2 through 6.4 allows local users Vulnerability in On-Line Customer Registration software for IRIX 6.2 through 6.4 allows local users to gain root privileges.

CVE-1999-1272 [HIGH] CVE-1999-1272: Buffer overflows in CDROM Confidence Test program (cdrom) allow local users to gain root privileges. Buffer overflows in CDROM Confidence Test program (cdrom) allow local users to gain root privileges.

CVE-2003-0688 [MEDIUM] CVE-2003-0688: The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properl The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initialize certain data structures, which allows remote attackers to cause a denial of service (process crash) via an invalid DNS response that causes Sendmail to free incorrect data.

CVE-1999-0049 [HIGH] CVE-1999-0049: Csetup under IRIX allows arbitrary file creation or overwriting. Csetup under IRIX allows arbitrary file creation or overwriting.

CVE-1999-1040 [HIGH] CVE-1999-1040: Vulnerabilities in (1) ipxchk and (2) ipxlink in NetWare Client 1.0 on IRIX 6.3 and 6.4 allows local Vulnerabilities in (1) ipxchk and (2) ipxlink in NetWare Client 1.0 on IRIX 6.3 and 6.4 allows local users to gain root access via a modified IFS environmental variable.

CVE-1999-0313 [HIGH] CVE-1999-0313: disk_bandwidth on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using re disk_bandwidth on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames.

CVE-2002-0356 [HIGH] CVE-2002-0356: Vulnerability in XFS filesystem reorganizer (fsr_xfs) in SGI IRIX 6.5.10 and earlier allows local us Vulnerability in XFS filesystem reorganizer (fsr_xfs) in SGI IRIX 6.5.10 and earlier allows local users to gain root privileges by overwriting critical system files.

CVE-1999-0413 [HIGH] CVE-1999-0413: A buffer overflow in the SGI X server allows local users to gain root access through the X server fo A buffer overflow in the SGI X server allows local users to gain root access through the X server font path.

CVE-1999-0329 [HIGH] CVE-1999-0329: SGI mediad program allows local users to gain root access. SGI mediad program allows local users to gain root access.

CVE-2002-0632 [MEDIUM] CVE-2002-0632: Vulnerability in SGI BDS (Bulk Data Service) BDSPro 2.4 and earlier allows clients to read arbitrary Vulnerability in SGI BDS (Bulk Data Service) BDSPro 2.4 and earlier allows clients to read arbitrary files on a BDS server.

CVE-1999-1143 [HIGH] CVE-1999-1143: Vulnerability in runtime linker program rld in SGI IRIX 6.x and earlier allows local users to gain p Vulnerability in runtime linker program rld in SGI IRIX 6.x and earlier allows local users to gain privileges via setuid and setgid programs.

CVE-2000-0283 [MEDIUM] CVE-2000-0283: The default installation of IRIX Performance Copilot allows remote attackers to access sensitive sys The default installation of IRIX Performance Copilot allows remote attackers to access sensitive system information via the pmcd daemon.

CVE-1999-1232 [HIGH] CVE-1999-1232: Untrusted search path vulnerability in day5datacopier in SGI IRIX 6.2 allows local users to execute Untrusted search path vulnerability in day5datacopier in SGI IRIX 6.2 allows local users to execute arbitrary commands via a modified PATH environment variable that points to a malicious cp program.

CVE-2004-0483 [MEDIUM] CVE-2004-0483: Unknown vulnerability in rpc.mountd for SGI IRIX 6.5.24 allows remote attackers to cause a denial of Unknown vulnerability in rpc.mountd for SGI IRIX 6.5.24 allows remote attackers to cause a denial of service (infinite loop) via certain RPC requests.

CVE-2002-0038 [MEDIUM] CVE-2002-0038: Vulnerability in the cache-limiting function of the unified name service daemon (nsd) in IRIX 6.5.4 Vulnerability in the cache-limiting function of the unified name service daemon (nsd) in IRIX 6.5.4 through 6.5.11 allows remote attackers to cause a denial of service by forcing the cache to fill the disk.

CVE-2004-2002 [MEDIUM] CVE-2004-2002: Unknown vulnerability in SGI IRIX 6.5 through 6.5.22m allows remote attackers to cause a denial of s Unknown vulnerability in SGI IRIX 6.5 through 6.5.22m allows remote attackers to cause a denial of service via a certain UDP packet.

CVE-2003-0574 [HIGH] CVE-2003-0574: Unknown vulnerability in SGI IRIX 6.5.x through 6.5.20, and possibly earlier versions, allows local Unknown vulnerability in SGI IRIX 6.5.x through 6.5.20, and possibly earlier versions, allows local users to cause a core dump in scheme and possibly gain privileges via certain environment variables, a different vulnerability than CVE-2001-0797 and CVE-1999-0028.

CVE-1999-1039 [HIGH] CVE-1999-1039: Vulnerability in (1) diskalign and (2) diskperf in IRIX 6.4 patches 2291 and 2848 allow a local user Vulnerability in (1) diskalign and (2) diskperf in IRIX 6.4 patches 2291 and 2848 allow a local user to create root-owned files leading to a root compromise.

CVE-2002-1265 [MEDIUM] CVE-2002-1265: The Sun RPC functionality in multiple libc implementations does not provide a time-out mechanism whe The Sun RPC functionality in multiple libc implementations does not provide a time-out mechanism when reading data from TCP connections, which allows remote attackers to cause a denial of service (hang).

CVE-2003-0472 [MEDIUM] CVE-2003-0472: The IPv6 capability in IRIX 6.5.19 allows remote attackers to cause a denial of service (hang) in in The IPv6 capability in IRIX 6.5.19 allows remote attackers to cause a denial of service (hang) in inetd via port scanning.