10

CVE-2000-0733

Exploit

Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to execute arbitrary commands via a long RLD variable in the IAC-SB-TELOPT_ENVIRON request.

Data is provided by the National Vulnerability Database (NVD)
Sgi ≫ Irix Version5.2
Sgi ≫ Irix Version5.3
Sgi ≫ Irix Version5.3 Editionxfs
Sgi ≫ Irix Version6.0
Sgi ≫ Irix Version6.0.1
Sgi ≫ Irix Version6.0.1 Editionxfs
Sgi ≫ Irix Version6.1
Sgi ≫ Irix Version6.2
Sgi ≫ Irix Version6.3
Sgi ≫ Irix Version6.4
Sgi ≫ Irix Version6.5
Sgi ≫ Irix Version6.5.1
Sgi ≫ Irix Version6.5.2m
Sgi ≫ Irix Version6.5.3
Sgi ≫ Irix Version6.5.3f
Sgi ≫ Irix Version6.5.3m
Sgi ≫ Irix Version6.5.4
Sgi ≫ Irix Version6.5.6
Sgi ≫ Irix Version6.5.7
Sgi ≫ Irix Version6.5.8
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 5.61% 0.893
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
http://www.securityfocus.com/bid/1572
Vendor Advisory
Exploit