CVEvulnerability
CVE-2002-0652
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-07-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
xfsmd for IRIX 6.5 through 6.5.16 allows remote attackers to execute arbitrary code via shell metacharacters that are not properly filtered from several calls to the popen() function, such as export_fs().
Affected configurations
• sgi irix 6.5
• sgi irix 6.5.1
• sgi irix 6.5.2
• sgi irix 6.5.3
• sgi irix 6.5.4
• sgi irix 6.5.5
• sgi irix 6.5.6
• sgi irix 6.5.7
• sgi irix 6.5.8
• sgi irix 6.5.9
• sgi irix 6.5.10
• sgi irix 6.5.11
• sgi irix 6.5.12
• sgi irix 6.5.13
• sgi irix 6.5.14
• sgi irix 6.5.15
• sgi irix 6.5.16
References
- ftp://patches.sgi.com/support/free/security/advisories/20020605-01-I patches.sgi.com
- ftp://patches.sgi.com/support/free/security/advisories/20020606-01-I Patch, Vendor Advisory
- http://marc.info/?l=bugtraq&m=102459162909825&w=2 marc.info
- ftp://patches.sgi.com/support/free/security/advisories/20020605-01-I patches.sgi.com
- ftp://patches.sgi.com/support/free/security/advisories/20020606-01-I Patch, Vendor Advisory
- http://marc.info/?l=bugtraq&m=102459162909825&w=2 marc.info