Vulnerabilities > SGI > Irix

DATE CVE VULNERABILITY TITLE RISK
2002-12-31 CVE-2002-1786 Unspecified vulnerability in SGI Irix
SGI IRIX 6.5 through 6.5.14 applies a umask of 022 to root core dumps, which allows local users to read the core dumps and possibly obtain sensitive information.
local
low complexity
sgi
2.1
2002-12-27 CVE-2002-1584 Privilege Escalation vulnerability in Sun Solaris RPC AUTH_DES
Unknown vulnerability in the AUTH_DES authentication for RPC in Solaris 2.5.1, 2.6, and 7, SGI IRIX 6.5 to 6.5.19f, and possibly other platforms, allows remote attackers to gain privileges.
network
low complexity
sgi sun
critical
10.0
2002-12-11 CVE-2002-1323 Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using a redefined @_ variable, which is not reset between successive calls.
local
low complexity
safe-pm sun sgi redhat sco
4.6
2002-12-11 CVE-2002-1318 Buffer Overrun vulnerability in Samba Server Encrypted Password
Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an encrypted password that causes the overflow during decryption in which a DOS codepage string is converted to a little-endian UCS2 unicode string.
network
low complexity
samba sgi hp
critical
10.0
2002-12-11 CVE-2002-1317 Remote Buffer Overrun vulnerability in Multiple Vendor X Font Server
Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a certain XFS query.
network
low complexity
xfree86-project sgi hp sun
7.5
2002-11-12 CVE-2002-1265 Denial Of Service vulnerability in Multiple Vendor Sun RPC LibC TCP Time-Out
The Sun RPC functionality in multiple libc implementations does not provide a time-out mechanism when reading data from TCP connections, which allows remote attackers to cause a denial of service (hang).
network
low complexity
gnu sgi apple
5.0
2002-09-05 CVE-2002-0875 Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group.
local
low complexity
sgi debian
2.1
2002-09-05 CVE-2002-0632 Unspecified vulnerability in SGI Irix
Vulnerability in SGI BDS (Bulk Data Service) BDSPro 2.4 and earlier allows clients to read arbitrary files on a BDS server.
network
low complexity
sgi
5.0
2002-07-23 CVE-2002-0678 Symbolic Link vulnerability in Multiple Vendor CDE ToolTalk Database Server
CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC procedure.
local
low complexity
caldera xi-graphics sgi compaq hp ibm sun
7.2
2002-07-23 CVE-2002-0677 CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument in an AUTH_UNIX procedure call, which is used as a table index by the _TT_ISCLOSE procedure.
network
low complexity
caldera xi-graphics sgi compaq hp ibm sun
7.5