Vulnerabilities in (1) ipxchk and (2) ipxlink in NetWare Client 1.0 on IRIX 6.3 and 6.4 allows local users to gain root access via a modified IFS environmental variable.

IRIX login program with a nonzero LOCKOUT parameter allows creation or damage to files.

Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option.

Buffer overflow in Korn Shell (ksh) suid_exec program on IRIX 6.x and earlier, and possibly other operating systems, allows local users to gain root privileges.

IRIX cdplayer allows local users to create directories in arbitrary locations via a command line option.

Vulnerability in runpriv in Indigo Magic System Administration subsystem of SGI IRIX 6.3 and 6.4 allows local users to gain root privileges.

Local user gains root privileges via buffer overflow in rdist, via expstr() function.

Command execution in Sun systems via buffer overflow in the at program.

root privileges via buffer overflow in xlock command on SGI IRIX systems.

Arbitrary file creation and program execution using FLEXlm LicenseManager, from versions 4.0 to 5.0, in IRIX.

Csetup under IRIX allows arbitrary file creation or overwriting.

The printers program in IRIX has a buffer overflow that gives root access to local users.

Buffer overflow in suidperl (sperl), Perl 4.x and 5.x.