Vulnerabilities (CVE)

Filtered by vendor Sgi Subscribe
Total 259 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2003-0576 1 Sgi 1 Irix 2025-04-03 5.0 MEDIUM N/A
Unknown vulnerability in the NFS daemon (nfsd) in SGI IRIX 6.5.19f and earlier allows remote attackers to cause a denial of service (kernel panic) via certain packets that cause XDR decoding errors, a different vulnerability than CVE-2003-0619.
CVE-1999-1409 2 Netbsd, Sgi 2 Netbsd, Irix 2025-04-03 2.1 LOW N/A
The at program in IRIX 6.2 and NetBSD 1.3.2 and earlier allows local users to read portions of arbitrary files by submitting the file to at with the -f argument, which generates error messages that at sends to the user via e-mail.
CVE-2005-0464 1 Sgi 1 Irix 2025-04-03 2.1 LOW N/A
gr_osview in SGI IRIX 6.5.22, and possibly other 6.5 versions, does not drop privileges when opening description files while in debug mode, which allows local users to read a line from arbitrary files via the -d and -D options, which prints the line as a formatting error.
CVE-2003-0991 2 Gnu, Sgi 2 Mailman, Propack 2025-04-03 5.0 MEDIUM N/A
Unknown vulnerability in the mail command handler in Mailman before 2.0.14 allows remote attackers to cause a denial of service (crash) via malformed e-mail commands.
CVE-1999-1468 4 Cray, Next, Sgi and 1 more 4 Unicos, Next, Irix and 1 more 2025-04-03 6.2 MEDIUM N/A
rdist in various UNIX systems uses popen to execute sendmail, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable.
CVE-1999-0765 1 Sgi 1 Irix 2025-04-03 10.0 HIGH N/A
SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor.
CVE-2001-0331 1 Sgi 1 Irix 2025-04-03 7.5 HIGH N/A
Buffer overflow in Embedded Support Partner (ESP) daemon (rpc.espd) in IRIX 6.5.8 and earlier allows remote attackers to execute arbitrary commands.
CVE-2004-0807 5 Conectiva, Mandrakesoft, Samba and 2 more 5 Linux, Mandrake Linux, Samba and 2 more 2025-04-03 5.0 MEDIUM N/A
Samba 3.0.6 and earlier allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via certain malformed requests that cause new processes to be spawned and enter an infinite loop.
CVE-2001-0800 1 Sgi 1 Irix 2025-04-03 10.0 HIGH N/A
lpsched in IRIX 6.5.13f and earlier allows remote attackers to execute arbitrary commands via shell metacharacters.
CVE-2000-0245 1 Sgi 1 Irix 2025-04-03 10.0 HIGH N/A
Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts.
CVE-2004-0233 3 Sgi, Slackware, Utempter 3 Propack, Slackware Linux, Utempter 2025-04-03 2.1 LOW N/A
Utempter allows device names that contain .. (dot dot) directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names in combination with an application that trusts the utmp or wtmp files.
CVE-1999-0083 1 Sgi 1 Irix 2025-04-03 5.0 MEDIUM N/A
getcwd() file descriptor leak in FTP.
CVE-2004-0226 4 Gentoo, Midnight Commander, Sgi and 1 more 4 Linux, Midnight Commander, Propack and 1 more 2025-04-03 10.0 HIGH N/A
Multiple buffer overflows in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code.
CVE-2000-0799 1 Sgi 1 Irix 2025-04-03 3.7 LOW N/A
inpview in InPerson in SGI IRIX 5.3 through IRIX 6.5.10 allows local users to gain privileges via a symlink attack on the .ilmpAAA temporary file.
CVE-2005-2925 1 Sgi 1 Irix 2025-04-03 7.2 HIGH N/A
runpriv in SGI IRIX allows local users to bypass intended restrictions and execute arbitrary commands via shell metacharacters in a command line for a privileged binary in /usr/sysadm/privbin.
CVE-2003-0796 1 Sgi 1 Irix 2025-04-03 7.5 HIGH N/A
Unknown vulnerability in rpc.mountd SGI IRIX 6.5.18 through 6.5.22 allows remote attackers to mount from unprivileged ports even with the -n option disabled.
CVE-2004-1613 3 Mozilla, Redhat, Sgi 7 Mozilla, Enterprise Linux, Enterprise Linux Desktop and 4 more 2025-04-03 5.0 MEDIUM N/A
Mozilla allows remote attackers to cause a denial of service (application crash from null dereference or infinite loop) via a web page that contains a (1) TEXTAREA, (2) INPUT, (3) FRAMESET or (4) IMG tag followed by a null character and some trailing characters, as demonstrated by mangleme.
CVE-2003-0573 1 Sgi 1 Irix 2025-04-03 5.0 MEDIUM N/A
The DNS callbacks in nsd in SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, do not perform sufficient sanity checking, with unknown impact.
CVE-1999-0461 2 Linux, Sgi 2 Linux Kernel, Irix 2025-04-03 10.0 HIGH N/A
Versions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to insert and delete entries by spoofing a source address.
CVE-2005-0465 1 Sgi 1 Irix 2025-04-03 2.1 LOW N/A
gr_osview in SGI IRIX does not drop privileges before opening files, which allows local users to overwrite arbitrary files via the -s option.