IR
Product
Irix
182
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 6Medium 2Low 0
Watch
Add Irix to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2003-0028 | – | Mar 25 | Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc,… Affected: 6.5; 6.5.1; 6.5.2; 6.5.2f; 6.5.2m; 6.5.3; +34 more |
| CVE-2003-0064 | – | Mar 3 | The dtterm terminal emulator allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's… Affected: 5.0; 5.0.1; 5.1; 5.1.1; 5.2; 5.3; +34 more |
| CVE-2002-1787 | – | Dec 31 | Buffer overflow in uux in eoe.sw.uucp package of SGI IRIX 6.5 through 6.5.17 allows local users to execute arbitrary code via unknown attack vectors Affected: 6.5; 6.5.1; 6.5.2; 6.5.3; 6.5.4; 6.5.5; +17 more |
| CVE-2002-1786 | – | Dec 31 | SGI IRIX 6.5 through 6.5.14 applies a umask of 022 to root core dumps, which allows local users to read the core dumps and possibly obtain sensitive information Affected: 6.5; 6.5.1; 6.5.2; 6.5.3; 6.5.4; 6.5.5; +9 more |
| CVE-2002-2093 | – | Dec 31 | The Video Control Panel on SGI O2/IRIX 6.5, when the Default Input is set to "Output Video", allows attackers to access a console session by running videoout then videoin Affected: 6.5.10f; 6.5.10m; 6.5.11; 6.5.11f; 6.5.11m; 6.5.12; +8 more |
| CVE-2002-1791 | – | Dec 31 | SGI IRIX 6.5 through 6.5.17 creates temporary desktop files with world-writable permissions, which allows local users to overwrite or corrupt those files Affected: 6.5; 6.5.1; 6.5.2; 6.5.3; 6.5.4; 6.5.5; +17 more |
| CVE-2002-2185 | – | Dec 31 | The Internet Group Management Protocol (IGMP) allows local users to cause a denial of service via an IGMP membership report to a target's Ethernet address instead of the Multicast… Affected: 6.5; 6.5.1; 6.5.2; 6.5.3; 6.5.4; 6.5.5; +18 more |
| CVE-2002-1584 | – | Dec 27 | Unknown vulnerability in the AUTH_DES authentication for RPC in Solaris 2.5.1, 2.6, and 7, SGI IRIX 6.5 to 6.5.19f, and possibly other platforms, allows remote attackers to gain… Affected: 6.5.1; 6.5.2; 6.5.2f; 6.5.2m; 6.5.3; 6.5.3f; +34 more |
| CVE-2002-1318 | – | Dec 11 | Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an encrypted password that causes the… Affected: 6.5; 6.5.1; 6.5.2; 6.5.3; 6.5.4; 6.5.5; +13 more |
| CVE-2002-1317 | – | Dec 11 | Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (crash) or execute arbitrary… Affected: 6.5; 6.5.1; 6.5.2; 6.5.3; 6.5.4; 6.5.5; +8 more |
| CVE-2002-1323 | – | Dec 11 | Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using a redefined @_… Affected: 6.5; 6.5.1; 6.5.2; 6.5.3; 6.5.4; 6.5.5; +25 more |
| CVE-2002-1265 | – | Nov 12 | The Sun RPC functionality in multiple libc implementations does not provide a time-out mechanism when reading data from TCP connections, which allows remote attackers to cause a… Affected: 2.3.1; 6.5; 6.5.1; 6.5.2; 6.5.3; 6.5.4; +17 more |
| CVE-2002-0632 | – | Sep 5 | Vulnerability in SGI BDS (Bulk Data Service) BDSPro 2.4 and earlier allows clients to read arbitrary files on a BDS server Affected: 6.5; 6.5.1; 6.5.2; 6.5.3; 6.5.4; 6.5.5; +11 more |
| CVE-2002-0875 | – | Sep 5 | Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group Affected: 6.5.15; 6.5.16; 6.5.17 |
| CVE-2002-0677 | – | Jul 23 | CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument… Affected: 5.2; 5.3; 6.0; 6.0.1; 6.1; 6.2; +19 more |
| CVE-2002-0678 | – | Jul 23 | CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC… Affected: 5.2; 5.3; 6.0; 6.0.1; 6.1; 6.2; +19 more |
| CVE-2002-0631 | – | Jul 3 | Unknown vulnerability in nveventd in NetVisualyzer on SGI IRIX 6.5 through 6.5.16 allows local users to write arbitrary files and gain root privileges Affected: 6.5; 6.5.1; 6.5.2; 6.5.3; 6.5.4; 6.5.5; +11 more |
| CVE-2002-0359 | – | Jul 3 | xfsmd for IRIX 6.5 through 6.5.16 uses weak authentication, which allows remote attackers to call dangerous RPC functions, including those that can mount or unmount xfs file… Affected: 6.2; 6.3; 6.4; 6.5; 6.5.1; 6.5.2; +34 more |
| CVE-2002-0652 | – | Jul 3 | xfsmd for IRIX 6.5 through 6.5.16 allows remote attackers to execute arbitrary code via shell metacharacters that are not properly filtered from several calls to the popen()… Affected: 6.5; 6.5.1; 6.5.2; 6.5.3; 6.5.4; 6.5.5; +11 more |
| CVE-2002-0042 | – | Jun 18 | Vulnerability in the XFS file system for SGI IRIX before 6.5.12 allows local users to cause a denial of service (hang) by creating a file that is not properly processed by XFS Affected: 6.5; 6.5.1; 6.5.2; 6.5.3; 6.5.4; 6.5.5; +8 more |
| CVE-2002-0357 | – | Jun 18 | Unknown vulnerability in rpc.passwd in the nfs.sw.nis subsystem of SGI IRIX 6.5.15 and earlier allows local users to gain root privileges Affected: 6.5; 6.5.1; 6.5.2; 6.5.2f; 6.5.2m; 6.5.3; +34 more |
| CVE-2002-0174 | – | May 29 | nsd on SGI IRIX before 6.5.11 allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the nsd.dump file Affected: 6.5; 6.5.1; 6.5.2; 6.5.3; 6.5.4; 6.5.5; +5 more |
| CVE-2002-0356 | – | May 29 | Vulnerability in XFS filesystem reorganizer (fsr_xfs) in SGI IRIX 6.5.10 and earlier allows local users to gain root privileges by overwriting critical system files Affected: 6.5; 6.5.1; 6.5.2; 6.5.2f; 6.5.2m; 6.5.3; +23 more |
| CVE-2002-0355 | – | May 29 | netstat in SGI IRIX before 6.5.12 allows local users to determine the existence of files on the system, even if the users do not have the appropriate permissions Affected: 6.5; 6.5.1; 6.5.2; 6.5.3; 6.5.4; 6.5.5; +6 more |
| CVE-2002-0213 | – | May 16 | xkas in Xinet K-AShare 0.011.01 for IRIX allows local users to read arbitrary files via a symlink attack on the VOLICON file, which is copied to the .HSicon file in a shared… Affected: 6.5; 6.5.1; 6.5.2; 6.5.3; 6.5.4; 6.5.5; +10 more |
| CVE-2002-0173 | – | May 16 | Buffer overflow in cpr for the eoe.sw.cpr SGI Checkpoint-Restart Software package on SGI IRIX 6.5.10 and earlier may allow local users to gain root privileges Affected: 5.0; 5.0.1; 5.1; 5.1.1; 5.2; 5.3; +34 more |
| CVE-2002-0172 | – | May 16 | /dev/ipfilter on SGI IRIX 6.5 is installed by /dev/MAKEDEV with insecure default permissions (644), which could allow a local user to cause a denial of service (traffic… Affected: 6.5; 6.5.1; 6.5.2; 6.5.3; 6.5.4; 6.5.5; +5 more |
| CVE-2002-0041 | – | Apr 22 | Unknown vulnerability in Mail for SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, when running with the -R option, allows local and remote attackers to cause a core… Affected: 6.5; 6.5.1; 6.5.2; 6.5.3; 6.5.4; 6.5.5; +15 more |
| CVE-2002-0017 | – | Apr 3 | Buffer overflow in SNMP daemon (snmpd) on SGI IRIX 6.5 through 6.5.15m allows remote attackers to execute arbitrary code via an SNMP request Affected: 6.5; 6.5.1; 6.5.2; 6.5.3; 6.5.4; 6.5.5; +15 more |
| CVE-2002-0040 | – | Mar 28 | Vulnerability in SGI IRIX 6.5.11 through 6.5.15f allows local users to cause privileged applications to dump core via the HOSTALIASES environment variable, which might allow the… Affected: 6.5; 6.5.1; 6.5.2; 6.5.3; 6.5.4; 6.5.5; +15 more |
| CVE-2002-0039 | – | Mar 28 | rpcbind in SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, allows remote attackers to cause a denial of service (crash) via malformed RPC packets with invalid lengths Affected: 6.5; 6.5.1; 6.5.2; 6.5.3; 6.5.4; 6.5.5; +15 more |
| CVE-2002-0038 | – | Jan 31 | Vulnerability in the cache-limiting function of the unified name service daemon (nsd) in IRIX 6.5.4 through 6.5.11 allows remote attackers to cause a denial of service by forcing… Affected: 6.5.4; 6.5.5; 6.5.6; 6.5.7; 6.5.8; 6.5.9; +2 more |
| CVE-2001-0797 | – | Dec 12 | Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as… Affected: 3.2; 3.3; 3.3.1; 3.3.2; 3.3.3 |
| CVE-2001-0799 | – | Dec 6 | Buffer overflows in lpsched in IRIX 6.5.13f and earlier allow remote attackers to execute arbitrary commands via a long argument Affected: through 6.5.13f |
| CVE-2001-0801 | – | Dec 6 | lpstat in IRIX 6.5.13f and earlier allows local users to gain root privileges by specifying a Trojan Horse nettype shared library Affected: through 6.5.13f |
| CVE-2001-0800 | – | Dec 6 | lpsched in IRIX 6.5.13f and earlier allows remote attackers to execute arbitrary commands via shell metacharacters Affected: through 6.5.13f |
| CVE-2001-0796 | – | Dec 6 | SGI IRIX 6.5 through 6.5.12f and possibly earlier versions, and FreeBSD 3.0, allows remote attackers to cause a denial of service via a malformed IGMP multicast packet with a… Affected: through 6.5.12f; 6.5 |
| CVE-2001-1456 | – | Sep 4 | Buffer overflow in the (1) smap/smapd and (2) CSMAP daemons for Gauntlet Firewall 5.0 through 6.0 allows remote attackers to execute arbitrary code via a crafted mail message Affected: 6.2; 6.3; 6.4; 6.5 |
| CVE-2000-1193 | – | Aug 31 | Performance Metrics Collector Daemon (PMCD) in Performance Copilot in IRIX 6.x allows remote attackers to cause a denial of service (resource exhaustion) via an extremely long… Affected: 6.3; 6.4; 6.5 |
| CVE-2001-0554 | – | Aug 14 | Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You… Affected: 6.5 |
| CVE-2001-0485 | – | Jun 27 | Unknown vulnerability in netprint in IRIX 6.2, and possibly other versions, allows local users with lp privileges attacker to execute arbitrary commands via the -n option Affected: 6.2 |
| CVE-2001-0331 | – | Jun 27 | Buffer overflow in Embedded Support Partner (ESP) daemon (rpc.espd) in IRIX 6.5.8 and earlier allows remote attackers to execute arbitrary commands Affected: through 6.5.8; 6.5.5 |
| CVE-2001-0247 | – | Jun 18 | Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence, as seen in (1) g_opendir, (2)… Affected: 6.1; 6.5.1; 6.5.2m; 6.5.3; 6.5.3f; 6.5.3m; +7 more |
| CVE-2000-0893 | – | Feb 16 | The presence of the Distributed GL Daemon (dgld) service on port 5232 on SGI IRIX systems allows remote attackers to identify the target host as an SGI system Affected: All versions, or not specified |
| CVE-2000-0844 | – | Nov 14 | Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via… Affected: 6.2; 6.3; 6.4; 6.5; 6.5.1; 6.5.2m; +7 more |
| CVE-2000-0796 | – | Oct 20 | Buffer overflow in dmplay in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long command line option Affected: 6.2; 6.3 |
| CVE-2000-0733 | – | Oct 20 | Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to execute arbitrary commands via a long RLD… Affected: 5.2; 5.3; 5.3; 6.0; 6.0.1; 6.0.1; +14 more |
| CVE-2000-0794 | – | Oct 20 | Buffer overflow in IRIX libgl.so library allows local users to gain root privileges via a long HOME variable to programs such as (1) gmemusage and (2) gr_osview Affected: 6.2 |
| CVE-2000-0795 | – | Oct 20 | Buffer overflow in lpstat in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long -n option Affected: 6.2; 6.3 |
| CVE-2000-0797 | – | Oct 20 | Buffer overflow in gr_osview in IRIX 6.2 and 6.3 allows local users to gain privileges via a long -D option Affected: 6.2; 6.3 |