CVE-1999-0038 – BSD/OS 2.1 / DG/UX 7.0 / Debian 1.3 / HP-UX 10.34 / IBM AIX 4.2 / SGI IRIX 6.4 / Solaris 2.5.1 - '/usr/bin/X11/xlock' Local Privilege Escalation
https://notcve.org/view.php?id=CVE-1999-0038
Buffer overflow in xlock program allows local users to execute commands as root. • https://www.exploit-db.com/exploits/19173 https://www.exploit-db.com/exploits/19172 https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0038 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVE-1999-0149 – SGI IRIX 6.2 - cgi-bin wrap
https://notcve.org/view.php?id=CVE-1999-0149
The wrap CGI program in IRIX allows remote attackers to view arbitrary directory listings via a .. (dot dot) attack. • https://www.exploit-db.com/exploits/19298 ftp://patches.sgi.com/support/free/security/advisories/19970501-02-PX http://www.osvdb.org/247 http://www.securityfocus.com/bid/373 https://exchange.xforce.ibmcloud.com/vulnerabilities/290 •
CVE-1999-0959 – SGI IRIX 6.4 - 'startmidi' Local Privilege Escalation
https://notcve.org/view.php?id=CVE-1999-0959
IRIX startmidi program allows local users to modify arbitrary files via a symlink attack. • https://www.exploit-db.com/exploits/19355 ftp://patches.sgi.com/support/free/security/advisories/19980301-01-PX http://www.osvdb.org/8447 http://www.securityfocus.com/bid/469 https://exchange.xforce.ibmcloud.com/vulnerabilities/1634 •
CVE-1999-0049
https://notcve.org/view.php?id=CVE-1999-0049
Csetup under IRIX allows arbitrary file creation or overwriting. • https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0049 •
CVE-1999-0051 – SGI IRIX 5.3/6.2 / SGI license_oeo 1.0 LicenseManager - 'NETLS_LICENSE_FILE' Local Privilege Escalation
https://notcve.org/view.php?id=CVE-1999-0051
Arbitrary file creation and program execution using FLEXlm LicenseManager, from versions 4.0 to 5.0, in IRIX. • https://www.exploit-db.com/exploits/19066 https://www.exploit-db.com/exploits/19067 https://www.exploit-db.com/exploits/19350 https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0051 •