Sgi Irix vulnerabilities

CVE-2002-0040 [LOW] CVE-2002-0040: Vulnerability in SGI IRIX 6.5.11 through 6.5.15f allows local users to cause privileged applications Vulnerability in SGI IRIX 6.5.11 through 6.5.15f allows local users to cause privileged applications to dump core via the HOSTALIASES environment variable, which might allow the users to gain privileges.

CVE-2002-1323 [MEDIUM] CVE-2002-1323: Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using a redefined @_ variable, which is not reset between successive calls.

CVE-2002-1517 [MEDIUM] CVE-2002-1517: fsr_efs in IRIX 6.5 allows local users to conduct unauthorized file activities via a symlink attack, fsr_efs in IRIX 6.5 allows local users to conduct unauthorized file activities via a symlink attack, possibly via the .fsrlast file.

CVE-2002-0213 [LOW] CVE-2002-0213: xkas in Xinet K-AShare 0.011.01 for IRIX allows local users to read arbitrary files via a symlink at xkas in Xinet K-AShare 0.011.01 for IRIX allows local users to read arbitrary files via a symlink attack on the VOLICON file, which is copied to the .HSicon file in a shared directory.

CVE-1999-1401 [MEDIUM] CVE-1999-1401: Vulnerability in Desktop searchbook program in IRIX 5.0.x through 6.2 sets insecure permissions for Vulnerability in Desktop searchbook program in IRIX 5.0.x through 6.2 sets insecure permissions for certain user files (iconbook and searchbook).

CVE-2003-0175 [LOW] CVE-2003-0175: SGI IRIX before 6.5.21 allows local users to cause a denial of service (kernel panic) via a certain SGI IRIX before 6.5.21 allows local users to cause a denial of service (kernel panic) via a certain call to the PIOCSWATCH ioctl.

CVE-2002-1518 [LOW] CVE-2002-1518: mv in IRIX 6.5 creates a directory with world-writable permissions while moving a directory, which c mv in IRIX 6.5 creates a directory with world-writable permissions while moving a directory, which could allow local users to modify files and directories.

CVE-1999-1102 [LOW] CVE-1999-1102: lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack that is triggered after invoking lpr 1000 times.

CVE-2004-0136 [LOW] CVE-2004-0136: The mapelf32exec function call in IRIX 6.5.20 through 6.5.24 allows local users to cause a denial of The mapelf32exec function call in IRIX 6.5.20 through 6.5.24 allows local users to cause a denial of service (system crash) via a "corrupted binary."

CVE-2002-0042 [LOW] CVE-2002-0042: Vulnerability in the XFS file system for SGI IRIX before 6.5.12 allows local users to cause a denial Vulnerability in the XFS file system for SGI IRIX before 6.5.12 allows local users to cause a denial of service (hang) by creating a file that is not properly processed by XFS.

CVE-2003-0177 [MEDIUM] CVE-2003-0177: SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, does not follow "-" entries in the /e SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, does not follow "-" entries in the /etc/group file, which may cause subsequent group membership entries to be processed inadvertently.

CVE-2002-2093 [LOW] CVE-2002-2093: The Video Control Panel on SGI O2/IRIX 6.5, when the Default Input is set to "Output Video", allows The Video Control Panel on SGI O2/IRIX 6.5, when the Default Input is set to "Output Video", allows attackers to access a console session by running videoout then videoin.

CVE-2002-0355 [LOW] CVE-2002-0355: netstat in SGI IRIX before 6.5.12 allows local users to determine the existence of files on the syst netstat in SGI IRIX before 6.5.12 allows local users to determine the existence of files on the system, even if the users do not have the appropriate permissions.

CVE-2004-0137 [LOW] CVE-2004-0137: Unknown vulnerability in init for IRIX 6.5.20 through 6.5.24 allows local users to cause a denial of Unknown vulnerability in init for IRIX 6.5.20 through 6.5.24 allows local users to cause a denial of service (system panic) as a result of "page invalidation issues."

CVE-2000-0579 [LOW] CVE-2000-0579: IRIX crontab creates temporary files with predictable file names and with the umask of the user, whi IRIX crontab creates temporary files with predictable file names and with the umask of the user, which could allow local users to modify another user's crontab file as it is being edited.

CVE-1999-1554 [LOW] CVE-1999-1554: /usr/sbin/Mail on SGI IRIX 3.3 and 3.3.1 does not properly set the group ID to the group ID of the u /usr/sbin/Mail on SGI IRIX 3.3 and 3.3.1 does not properly set the group ID to the group ID of the user who started Mail, which allows local users to read the mail of other users.

CVE-2002-0172 [LOW] CVE-2002-0172: /dev/ipfilter on SGI IRIX 6.5 is installed by /dev/MAKEDEV with insecure default permissions (644), /dev/ipfilter on SGI IRIX 6.5 is installed by /dev/MAKEDEV with insecure default permissions (644), which could allow a local user to cause a denial of service (traffic disruption).

CVE-2002-1786 [LOW] CVE-2002-1786: SGI IRIX 6.5 through 6.5.14 applies a umask of 022 to root core dumps, which allows local users to r SGI IRIX 6.5 through 6.5.14 applies a umask of 022 to root core dumps, which allows local users to read the core dumps and possibly obtain sensitive information.

CVE-1999-0327 [LOW] CVE-1999-0327: SGI syserr program allows local users to corrupt files. SGI syserr program allows local users to corrupt files.

CVE-2003-0679 [LOW] CVE-2003-0679: Unknown vulnerability in the libcpr library for the Checkpoint/Restart (cpr) system on SGI IRIX 6.5. Unknown vulnerability in the libcpr library for the Checkpoint/Restart (cpr) system on SGI IRIX 6.5.21f and earlier allows local users to truncate or overwrite certain files.