Sgi: Security Vulnerabilities
nsd on SGI IRIX before 6.5.11 allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the nsd.dump file.
CVSS Score
7.2
EPSS Score
0.002
Published
2002-05-29
netstat in SGI IRIX before 6.5.12 allows local users to determine the existence of files on the system, even if the users do not have the appropriate permissions.
CVSS Score
2.1
EPSS Score
0.002
Published
2002-05-29
Vulnerability in XFS filesystem reorganizer (fsr_xfs) in SGI IRIX 6.5.10 and earlier allows local users to gain root privileges by overwriting critical system files.
CVSS Score
7.2
EPSS Score
0.002
Published
2002-05-29
IRISconsole 2.0 may allow users to log into the icadmin account with an incorrect password in some circumstances, which could allow users to gain privileges.
CVSS Score
7.5
EPSS Score
0.015
Published
2002-05-16
/dev/ipfilter on SGI IRIX 6.5 is installed by /dev/MAKEDEV with insecure default permissions (644), which could allow a local user to cause a denial of service (traffic disruption).
CVSS Score
2.1
EPSS Score
0.002
Published
2002-05-16
Buffer overflow in cpr for the eoe.sw.cpr SGI Checkpoint-Restart Software package on SGI IRIX 6.5.10 and earlier may allow local users to gain root privileges.
CVSS Score
7.2
EPSS Score
0.001
Published
2002-05-16
xkas in Xinet K-AShare 0.011.01 for IRIX allows local users to read arbitrary files via a symlink attack on the VOLICON file, which is copied to the .HSicon file in a shared directory.
CVSS Score
2.1
EPSS Score
0.001
Published
2002-05-16
Unknown vulnerability in Mail for SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, when running with the -R option, allows local and remote attackers to cause a core dump.
CVSS Score
5.0
EPSS Score
0.011
Published
2002-04-22
Buffer overflow in SNMP daemon (snmpd) on SGI IRIX 6.5 through 6.5.15m allows remote attackers to execute arbitrary code via an SNMP request.
CVSS Score
7.5
EPSS Score
0.061
Published
2002-04-03
rpcbind in SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, allows remote attackers to cause a denial of service (crash) via malformed RPC packets with invalid lengths.
CVSS Score
5.0
EPSS Score
0.007
Published
2002-03-28