10

CVE-2000-0733

Exploit
Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to execute arbitrary commands via a long RLD variable in the IAC-SB-TELOPT_ENVIRON request.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sgi ≫ Irix Version 5.2
Sgi ≫ Irix Version 5.3
Sgi ≫ Irix Version 5.3 Edition xfs
Sgi ≫ Irix Version 6.0
Sgi ≫ Irix Version 6.0.1
Sgi ≫ Irix Version 6.0.1 Edition xfs
Sgi ≫ Irix Version 6.1
Sgi ≫ Irix Version 6.2
Sgi ≫ Irix Version 6.3
Sgi ≫ Irix Version 6.4
Sgi ≫ Irix Version 6.5
Sgi ≫ Irix Version 6.5.1
Sgi ≫ Irix Version 6.5.2m
Sgi ≫ Irix Version 6.5.3
Sgi ≫ Irix Version 6.5.3f
Sgi ≫ Irix Version 6.5.3m
Sgi ≫ Irix Version 6.5.4
Sgi ≫ Irix Version 6.5.6
Sgi ≫ Irix Version 6.5.7
Sgi ≫ Irix Version 6.5.8
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 12.41% 0.957
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
ftp://sgigate.sgi.com/security/20000801-02-P
http://archives.neohapsis.com/archives/bugtraq/2000-08/0154.html
Patch
Vendor Advisory
Exploit
http://www.securityfocus.com/bid/1572
Vendor Advisory
Exploit