IRIX security

Open forum for security issues and info.
Forum rules
Any posts concerning pirated software or offering to buy/sell/trade commercial software are subject to removal.
User avatar
squeen
Moderator
Moderator
Posts: 2933
Joined: Fri May 09, 2003 6:10 am
Location: Maryland, USA

IRIX security

Unread postby squeen » Wed Jun 11, 2003 9:45 am

Is there an interest in a new IRIX security forum? I get reguar security alerts I could pass along.

User avatar
dexter1
Moderator
Moderator
Posts: 2735
Joined: Thu Feb 20, 2003 6:57 am
Location: Zoetermeer, The Netherlands

Unread postby dexter1 » Wed Jun 11, 2003 12:04 pm

This could be a good idea for people who don't look at Bugtraq regularly (can't blame 'em) and fish out the SGI specific issues. Plus we get a chance to say something about it :)

So let me start with something very recent:

SGI Security Advisory
Title : WebSetup / WebMin Security Vulnerability
Number : 20030602-01-I
Date : June 9, 2003
Reference: SGI BUG 882560
Reference: CVE CAN-2003-0101
Fixed in : websetup v 3.5 package from IRIX 6.5.20 Applications CD

- -----------------------
It's been reported that IRIX's websetup package (which uses WebMin) has a
security problem that allows unauthenticated remote access to Webmin.
For more information, see:
http://www.webmin.com/updates.html
http://cve.mitre.org/cgi-bin/cvename.cg ... -2003-0101

SGI's recommendation is to ditch the websetup package. As if we haven't done that already... :)

User avatar
semi-fly
Posts: 786
Joined: Fri Feb 21, 2003 5:29 am
Location: Ypsitucky, MI
Contact:

Unread postby semi-fly » Wed Jun 11, 2003 1:00 pm

Security is a big issue on any plattform and I'd love to see an index here dedicated solely to that topic. I deal with IT personal everyday, and let me tell you most people figure in security almost as an after thought: "I'll never get cracked... the chances are too small, to many systems on the web....". It's pretty scary when you think about it.

User avatar
Hakimoto
Moderator
Moderator
Posts: 2580
Joined: Sun Mar 30, 2003 4:29 am
Location: Nijmegen, Netherlands, Europe
Contact:

Request....

Unread postby Hakimoto » Wed Jun 11, 2003 2:15 pm

Pleeeeeese! :D That´d be great.
The Bandito wrote:In a few years, no doubt, you'll be able to buy a computer,
software and operating system that will match the capabilities
of your current Amiga at about the price you paid for the
Amiga way back when. But you can smile to yourself, knowing
that you were touching the future years before the rest of
the world. And that other computers and operating systems
will do with brute force what the Amiga did years before with
grace, elegance and style.


Eroteme.ch - my end of the internet...

User avatar
cvisors
Moderator
Moderator
Posts: 179
Joined: Fri Jan 31, 2003 2:50 am
Location: Melbourne Australia
Contact:

I think this would be a good idea.

Unread postby cvisors » Wed Jun 11, 2003 6:37 pm

Also it would be a great place to discus improving IRIX security, from the default install which is pretty open.

Benjamin

User avatar
whiter
Posts: 975
Joined: Tue Apr 29, 2003 2:02 pm
Location: Melbourne, Australia
Contact:

Unread postby whiter » Thu Jun 12, 2003 2:23 am

Yahoo!
We have a security forum :-)
Shall I describe it to you? Or do you want me to get you a box?

User avatar
nekonoko
Site Admin
Site Admin
Posts: 8145
Joined: Thu Jan 23, 2003 1:31 am
Location: Pleasanton, California
Contact:

Unread postby nekonoko » Sat Jun 14, 2003 12:38 pm

whiter wrote:Yahoo!
We have a security forum :-)


One of the few things I had time to do from the hotel room in Phoenix :) I am so glad to be home after that non-adventure.
Twitter: @neko_no_ko
IRIX Release 4.0.5 IP12 Version 06151813 System V
Copyright 1987-1992 Silicon Graphics, Inc.
All Rights Reserved.

directedition
Posts: 515
Joined: Mon Feb 03, 2003 5:20 pm
Location: Pasadena, MD
Contact:

Unread postby directedition » Sat Jun 14, 2003 2:23 pm

In just a few days, the security forum has more posts then the GNU forum.
:lol:
- Jim
:Indigo: :Indigo: :Indy: :Indy: <- signed by The Screensavers :) :Indigo2IMP: (230L) (230L) :540: :1600SW: :1600SW: <- touchscreen :PI: :Octane2:

User avatar
nekonoko
Site Admin
Site Admin
Posts: 8145
Joined: Thu Jan 23, 2003 1:31 am
Location: Pleasanton, California
Contact:

Unread postby nekonoko » Sat Jun 14, 2003 2:34 pm

Well I cheated; I moved old security related posts over to this forum from the other forums :o
Twitter: @neko_no_ko
IRIX Release 4.0.5 IP12 Version 06151813 System V
Copyright 1987-1992 Silicon Graphics, Inc.
All Rights Reserved.


Return to “SGI: Security”

Who is online

Users browsing this forum: No registered users and 1 guest