Sgi Irix vulnerabilities, page 2

165 vulnerabilities

Known vulnerabilities in Sgi Irix, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

10CVE-2003-0473sgiirix
EPSS score
2.34%
Unknown vulnerability in the IPv6 capability in IRIX 6.5.19 causes snoop to process packets as the root user, with unknown implications.
7.5CVE-2001-1456mcafeewebshield_smtp+4
EPSS score
5.65%
Buffer overflow in the (1) smap/smapd and (2) CSMAP daemons for Gauntlet Firewall 5.0 through 6.0 allows remote attackers to execute arbitrary code via a crafted mail message.
10CVE-2001-0248hphp-ux+1
EPSS score
11.17%
Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to generate long strings.
7.2CVE-2001-0801sgiirix
EPSS score
0.46%
lpstat in IRIX 6.5.13f and earlier allows local users to gain root privileges by specifying a Trojan Horse nettype shared library.
10CVE-2001-0249hphp-ux+2
EPSS score
19.75%
Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which uses glob to generate long strings.
10CVE-2001-0797hphp-ux+5
EPSS score
94.92%
Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin.
10CVE-2001-0799sgiirix
EPSS score
4.17%
Buffer overflows in lpsched in IRIX 6.5.13f and earlier allow remote attackers to execute arbitrary commands via a long argument.
10CVE-2001-0554debiandebian_linux+10
EPSS score
38.75%
Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.
10CVE-2001-0800sgiirix
EPSS score
54.12%
lpsched in IRIX 6.5.13f and earlier allows remote attackers to execute arbitrary commands via shell metacharacters.
5CVE-2001-0796freebsdfreebsd+1
EPSS score
1.63%
SGI IRIX 6.5 through 6.5.12f and possibly earlier versions, and FreeBSD 3.0, allows remote attackers to cause a denial of service via a malformed IGMP multicast packet with a small response delay.
7.5CVE-2001-0331sgiirix
EPSS score
3.27%
Buffer overflow in Embedded Support Partner (ESP) daemon (rpc.espd) in IRIX 6.5.8 and earlier allows remote attackers to execute arbitrary commands.
10CVE-2001-0247freebsdfreebsd+4
EPSS score
19.32%
Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence, as seen in (1) g_opendir, (2) g_lstat, (3) g_stat, and (4) the glob0 buffer as used in the glob functions glob2 and glob3.
7.2CVE-2001-0485sgiirix
EPSS score
1.16%
Unknown vulnerability in netprint in IRIX 6.2, and possibly other versions, allows local users with lp privileges attacker to execute arbitrary commands via the -n option.
7.2CVE-2005-2925sgiirix
EPSS score
0.83%
runpriv in SGI IRIX allows local users to bypass intended restrictions and execute arbitrary commands via shell metacharacters in a command line for a privileged binary in /usr/sysadm/privbin.
7.5CVE-2005-0138sgiirix
EPSS score
1.33%
rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not correctly allow access to anonymous clients that connect from a system whose hostname can not be determined. NOTE: while this issue occurs in a security mechanism, there is no apparent attacker role and probably does not satisfy the CVE definition of a vulnerability.
7.2CVE-2005-0113sgiirix
EPSS score
0.39%
inpview in SGI IRIX allows local users to execute arbitrary commands via the SUN_TTSESSION_CMD environment variable, which is executed by inpview without dropping privileges.
2.1CVE-2005-0465sgiirix
EPSS score
0.78%
gr_osview in SGI IRIX does not drop privileges before opening files, which allows local users to overwrite arbitrary files via the -s option.
2.1CVE-2005-0464sgiirix
EPSS score
0.69%
gr_osview in SGI IRIX 6.5.22, and possibly other 6.5 versions, does not drop privileges when opening description files while in debug mode, which allows local users to read a line from arbitrary files via the -d and -D options, which prints the line as a formatting error.
7.5CVE-2005-0139sgiirix
EPSS score
1.33%
Unknown vulnerability in rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not sufficiently restrict access rights for read-mostly exports, which allows attackers to conduct unauthorized activities.
10CVE-2000-1220debianlpr+2
EPSS score
14.22%
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file.