Vulnerability in Sgi Irix

CVE-2000-0733

Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to execute arbitrary commands via a long RLD variable in the IAC-SB-TELOPT_ENVIRON request.

EPSS: 0.124 (95.8th percentile) — read the EPSS interpretation.

Affected products

  • Sgi Irix — versions 5.2, 5.3, 6.0
  • N/a — versions n/a

References

  • cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ, Patch)
  • cve@mitre.org (Exploit, vdb-entry, x_refsource_BID, Vendor Advisory)