Cluster 05: VEN-SGI

• To: cve-review@linus.mitre.org
• Subject: Cluster 05: VEN-SGI
• From: "Steven M. Christey" <coley@linus.mitre.org>
• Date: Thu, 17 Jun 1999 15:10:04 -0400 (EDT)

This cluster has 7 vulnerabilities.


------------------------------------------
Candidate: CAN-1999-0044
Proposer: 001
Assigned: 19990617
Announced: 19990617
Category: SF
Reference: HP:19970301-01-P
Reference: ISS:sgi-fsdump

fsdump command in IRIX allows local users to obtain root access
by modifying sensitive files.

------------------------------------------
Candidate: CAN-1999-0215
Proposer: 001
Assigned: 19990617
Announced: 19990617
Category: SF
Reference: SGI:19981004-01-PX
Reference: CIAC:J-012

Routed allows attackers to append data to files.

------------------------------------------
Candidate: CAN-1999-0327
Proposer: 001
Assigned: 19990617
Announced: 19990617
Category: SF
Reference: SGI:19971103-01-PX

SGI syserr program allows local users to corrupt files.

------------------------------------------
Candidate: CAN-1999-0328
Proposer: 001
Assigned: 19990617
Announced: 19990617
Category: SF
Reference: SGI:19971103-01-PX

SGI permissions program allows local users to gain root privileges.

------------------------------------------
Candidate: CAN-1999-0329
Proposer: 001
Assigned: 19990617
Announced: 19990617
Category: SF
Reference: SGI:19980602-01-PX

SGI mediad program allows local users to gain root access.

------------------------------------------
Candidate: CAN-1999-0413
Proposer: 001
Assigned: 19990617
Announced: 19990617
Category: SF
Reference: SGI:19990301-01-PX

A buffer overflow in the SGI X server allows local users to gain root
access through the X server font path.

------------------------------------------
Candidate: CAN-1999-0463
Proposer: 001
Assigned: 19990617
Announced: 19990617
Category: SF
Reference: SGI:19981201-01-PX

Remote attackers can perform a denial of service using IRIX fcagent.

• Follow-Ups:
  • Re: Cluster 05: VEN-SGI
    • From: Adam Shostack <adam@netect.com>

• Prev by Date: Cluster 04: VEN-HP
• Next by Date: Cluster 06: VEN-others
• Prev by thread: Re: Cluster 04: VEN-HP
• Next by thread: Re: Cluster 05: VEN-SGI
• Index(es):
  • Date
  • Thread