Cluster 05: VEN-SGI

["Steven M. Christey" <coley@linus.mitre.org>]

This cluster has 7 vulnerabilities.


------------------------------------------
Candidate: CAN-1999-0044
Proposer: 001
Assigned: 19990617
Announced: 19990617
Category: SF
Reference: HP:19970301-01-P
Reference: ISS:sgi-fsdump

fsdump command in IRIX allows local users to obtain root access
by modifying sensitive files.

------------------------------------------
Candidate: CAN-1999-0215
Proposer: 001
Assigned: 19990617
Announced: 19990617
Category: SF
Reference: SGI:19981004-01-PX
Reference: CIAC:J-012

Routed allows attackers to append data to files.

------------------------------------------
Candidate: CAN-1999-0327
Proposer: 001
Assigned: 19990617
Announced: 19990617
Category: SF
Reference: SGI:19971103-01-PX

SGI syserr program allows local users to corrupt files.

------------------------------------------
Candidate: CAN-1999-0328
Proposer: 001
Assigned: 19990617
Announced: 19990617
Category: SF
Reference: SGI:19971103-01-PX

SGI permissions program allows local users to gain root privileges.

------------------------------------------
Candidate: CAN-1999-0329
Proposer: 001
Assigned: 19990617
Announced: 19990617
Category: SF
Reference: SGI:19980602-01-PX

SGI mediad program allows local users to gain root access.

------------------------------------------
Candidate: CAN-1999-0413
Proposer: 001
Assigned: 19990617
Announced: 19990617
Category: SF
Reference: SGI:19990301-01-PX

A buffer overflow in the SGI X server allows local users to gain root
access through the X server font path.

------------------------------------------
Candidate: CAN-1999-0463
Proposer: 001
Assigned: 19990617
Announced: 19990617
Category: SF
Reference: SGI:19981201-01-PX

Remote attackers can perform a denial of service using IRIX fcagent.