Vulnerabilities > SGI

DATE CVE VULNERABILITY TITLE RISK
2005-03-14 CVE-2005-0398 Denial of Service vulnerability in KAME Racoon Malformed ISAKMP Packet Headers
The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service (crash) via malformed ISAKMP packets.
network
low complexity
ipsec-tools kame sgi altlinux redhat suse
5.0
2005-03-02 CVE-2005-0605 Integer Overflow vulnerability in libXPM Bitmap_unit
scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow.
7.5
2005-01-27 CVE-2004-0930 Remote Wild Card Denial Of Service vulnerability in Samba
The ms_fnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service (CPU consumption) via a SAMBA request that contains multiple * (wildcard) characters.
network
low complexity
samba sgi conectiva gentoo redhat
5.0
2005-01-21 CVE-2004-1184 Multiple vulnerability in GNU Enscript
The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters.
local
low complexity
gnu sgi redhat suse
4.6
2005-01-14 CVE-2005-0113 Local Privilege Escalation vulnerability in SGI Irix 6.5
inpview in SGI IRIX allows local users to execute arbitrary commands via the SUN_TTSESSION_CMD environment variable, which is executed by inpview without dropping privileges.
local
low complexity
sgi
7.2
2005-01-10 CVE-2004-0139 Unspecified vulnerability in SGI Irix
Unknown vulnerability in the bsd.a kernel networking for SGI IRIX 6.5.22 through 6.5.25, and possibly earlier versions, in which "t_unbind changes t_bind's behavior," has unknown impact and attack vectors.
network
low complexity
sgi
critical
10.0
2004-12-31 CVE-2004-1891 Remote Security vulnerability in SGI Irix 6.5.20
The ftp_syslog function in ftpd in SGI IRIX 6.5.20 "doesn't work with anonymous FTP," which has an unknown impact, possibly preventing the actions of anonymous users from being logged.
network
low complexity
sgi
5.0
2004-12-31 CVE-2004-1889 Denial Of Service vulnerability in SGI IRIX ftpd
Unknown vulnerability in ftpd in SGI IRIX 6.5.20 through 6.5.23 allows remote attackers to cause a denial of service (hang) via a link failure with Microsoft Windows.
network
low complexity
sgi
5.0
2004-12-31 CVE-2004-1471 Multiple vulnerability in CVS
Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a wrapper line.
network
high complexity
cvs openpkg sgi freebsd gentoo openbsd
7.1
2004-12-21 CVE-2004-1307 Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overflow. 7.5