Sgi vulnerabilities, page 4
235 vulnerabilities
Known vulnerabilities in Sgi products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 17 products.
CVE-2012-3419debianpcp+2
EPSS score1.76%
Performance Co-Pilot (PCP) before 3.6.5 exports some of the /proc file system, which allows attackers to obtain sensitive information such as proc/pid/maps and command line arguments.CVE-2012-3418debianpcp+1EPSS score5.71%
libpcp in Performance Co-Pilot (PCP) before 3.6.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a PDU with the numcreds field value greater than the number of actual elements to the __pmDecodeCreds function in p_creds.c; (2) the string byte number value to the __pmDecodeNameList function in p_pmns.c; (3) the numids value to the __pmDecodeIDList function in p_pmns.c; (4) unspecified vectors to the __pmDecodeProfile function in p_profile.c; the (5) status number value or (6) string number value to the __pmDecodeNameList function in p_pmns.c; (7) certain input to the __pmDecodeResult function in p_result.c; (8) the name length field (namelen) to the DecodeNameReq function in p_pmns.c; (9) a crafted PDU_FETCH request to the __pmDecodeFetch function in p_fetch.c; (10) the namelen field in the __pmDecodeInstanceReq function in p_instance.c; (11) the buflen field to the __pmDecodeText function in p_text.c; (12) PDU_INSTANCE packets to the __pmDecodeInstance in p_instance.c; or the (13) c_numpmid or (14) v_numval fields to the __pmDecodeLogControl function in p_lcontrol.c, which triggers integer overflows, heap-based buffer overflows, and/or buffer over-reads.CVE-2000-1220debianlpr+2EPSS score14.22%
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file.CVE-2000-1193sgiirixEPSS score3.31%
Performance Metrics Collector Daemon (PMCD) in Performance Copilot in IRIX 6.x allows remote attackers to cause a denial of service (resource exhaustion) via an extremely long string to the PMCD port.CVE-2000-1221debianlpr+3EPSS score16.73%
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostname of the local machine to the hostname of the print server as returned by gethostname, which allows remote attackers to bypass intended access controls by modifying the DNS for the attacking IP.CVE-2000-0578sgimipspro_compilersEPSS score0.40%
SGI MIPSPro compilers C, C++, F77 and F90 generate temporary files in /tmp with predictable file names, which could allow local users to insert malicious contents into these files as they are being compiled by another user.CVE-2000-0844calderaopenlinux_ebuilder+14EPSS score15.63%
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.CVE-2000-0794sgiirixEPSS score0.80%
Buffer overflow in IRIX libgl.so library allows local users to gain root privileges via a long HOME variable to programs such as (1) gmemusage and (2) gr_osview.CVE-2000-0207sgiinfosearch+1EPSS score7.66%
SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters.CVE-2000-0796sgiirixEPSS score1.08%
Buffer overflow in dmplay in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long command line option.CVE-2000-0579sgiirixEPSS score0.34%
IRIX crontab creates temporary files with predictable file names and with the umask of the user, which could allow local users to modify another user's crontab file as it is being edited.CVE-2000-0795sgiirixEPSS score1.17%
Buffer overflow in lpstat in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long -n option.CVE-2000-0283sgiirixEPSS score2.21%
The default installation of IRIX Performance Copilot allows remote attackers to access sensitive system information via the pmcd daemon.CVE-2000-0245sgiirixEPSS score11.68%
Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts.CVE-2000-0533sgiworkshop_debugger_and_performance_toolsEPSS score0.36%
Vulnerability in cvconnect in SGI IRIX WorkShop allows local users to overwrite arbitrary files.CVE-2000-0797sgiirixEPSS score1.05%
Buffer overflow in gr_osview in IRIX 6.2 and 6.3 allows local users to gain privileges via a long -D option.CVE-2000-0013sgiirixEPSS score0.70%
IRIX soundplayer program allows local users to gain privileges by including shell metacharacters in a .wav file, which is executed via the midikeys program.CVE-2000-0799sgiirixEPSS score0.75%
inpview in InPerson in SGI IRIX 5.3 through IRIX 6.5.10 allows local users to gain privileges via a symlink attack on the .ilmpAAA temporary file.CVE-2000-0733sgiirixEPSS score12.40%
Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to execute arbitrary commands via a long RLD variable in the IAC-SB-TELOPT_ENVIRON request.CVE-2000-0545sgimailxEPSS score0.88%
Buffer overflow in mailx mail command (aka Mail) on Linux systems allows local users to gain privileges via a long -c (carbon copy) parameter.