Sgi Irix vulnerabilities, page 3
165 vulnerabilities
Known vulnerabilities in Sgi Irix, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2000-1193sgiirix
EPSS score3.31%
Performance Metrics Collector Daemon (PMCD) in Performance Copilot in IRIX 6.x allows remote attackers to cause a denial of service (resource exhaustion) via an extremely long string to the PMCD port.CVE-2000-1221debianlpr+3EPSS score16.73%
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostname of the local machine to the hostname of the print server as returned by gethostname, which allows remote attackers to bypass intended access controls by modifying the DNS for the attacking IP.CVE-2000-0844calderaopenlinux_ebuilder+14EPSS score15.63%
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.CVE-2000-0794sgiirixEPSS score0.80%
Buffer overflow in IRIX libgl.so library allows local users to gain root privileges via a long HOME variable to programs such as (1) gmemusage and (2) gr_osview.CVE-2000-0207sgiinfosearch+1EPSS score7.66%
SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters.CVE-2000-0796sgiirixEPSS score1.08%
Buffer overflow in dmplay in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long command line option.CVE-2000-0579sgiirixEPSS score0.34%
IRIX crontab creates temporary files with predictable file names and with the umask of the user, which could allow local users to modify another user's crontab file as it is being edited.CVE-2000-0795sgiirixEPSS score1.17%
Buffer overflow in lpstat in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long -n option.CVE-2000-0283sgiirixEPSS score2.21%
The default installation of IRIX Performance Copilot allows remote attackers to access sensitive system information via the pmcd daemon.CVE-2000-0245sgiirixEPSS score11.68%
Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts.CVE-2000-0797sgiirixEPSS score1.05%
Buffer overflow in gr_osview in IRIX 6.2 and 6.3 allows local users to gain privileges via a long -D option.CVE-2000-0013sgiirixEPSS score0.70%
IRIX soundplayer program allows local users to gain privileges by including shell metacharacters in a .wav file, which is executed via the midikeys program.CVE-2000-0799sgiirixEPSS score0.75%
inpview in InPerson in SGI IRIX 5.3 through IRIX 6.5.10 allows local users to gain privileges via a symlink attack on the .ilmpAAA temporary file.CVE-2000-0733sgiirixEPSS score12.40%
Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to execute arbitrary commands via a long RLD variable in the IAC-SB-TELOPT_ENVIRON request.CVE-2000-0798sgiirixEPSS score3.21%
The truncate function in IRIX 6.x does not properly check for privileges when the file is in the xfs file system, which allows local users to delete the contents of arbitrary files.CVE-2010-1039hpnfs\/oncplus+3EPSS score20.17%
Format string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and earlier; IBM VIOS 2.1, 1.5, and earlier; NFS/ONCplus B.11.31_09 and earlier on HP HP-UX B.11.11, B.11.23, and B.11.31; and SGI IRIX 6.5 allows remote attackers to execute arbitrary code via an RPC request containing format string specifiers in an invalid directory name.CVE-1999-1181sgiirixEPSS score0.36%
Vulnerability in On-Line Customer Registration software for IRIX 6.2 through 6.4 allows local users to gain root privileges.CVE-1999-1399sgiirixEPSS score0.89%
spaceball program in SpaceWare 7.3 v1.0 in IRIX 6.2 allows local users to gain root privileges by setting the HOSTNAME environmental variable to contain the commands to be executed.CVE-1999-1494sgiirixEPSS score0.95%
colorview in Silicon Graphics IRIX 5.1, 5.2, and 6.0 allows local attackers to read arbitrary files via the -text argument.CVE-1999-1143sgiirixEPSS score0.35%
Vulnerability in runtime linker program rld in SGI IRIX 6.x and earlier allows local users to gain privileges via setuid and setgid programs.