high7.5Public exploit code
CVE-2002-0652
xfsmd for IRIX 6.5 through 6.5.16 allows remote attackers to execute arbitrary code via shell metacharacters that are not properly filtered from several calls …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SGI IRIX 6.x - 'rpc.xfsmd' Remote Command Execution2002-06-20 · remote · irix · Verified
Impact
xfsmd for IRIX 6.5 through 6.5.16 allows remote attackers to execute arbitrary code via shell metacharacters that are not properly filtered from several calls to the popen() function, such as export_fs().
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sgi | Irix | Versions 6.5, 6.5.1, 6.5.2, 6.5.3, 6.5.4, 6.5.5 |