CVE-2000-0733
high · 10Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to execute arbitrary commands via a long RLD variable in the IAC-SB-TELOPT_ENVIRON request.
10
CVSS
12.4%
EPSS (exploit prob.)
96th
EPSS percentile
2000-10-20
Published
AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| sgi | irix | 5.2 |
| sgi | irix | 5.3 |
| sgi | irix | 5.3 |
| sgi | irix | 6.0 |
| sgi | irix | 6.0.1 |
| sgi | irix | 6.0.1 |
| sgi | irix | 6.1 |
| sgi | irix | 6.2 |
| sgi | irix | 6.3 |
| sgi | irix | 6.4 |
| sgi | irix | 6.5 |
| sgi | irix | 6.5.1 |
| sgi | irix | 6.5.2m |
| sgi | irix | 6.5.3 |
| sgi | irix | 6.5.3f |
| sgi | irix | 6.5.3m |
| sgi | irix | 6.5.4 |
| sgi | irix | 6.5.6 |
| sgi | irix | 6.5.7 |
| sgi | irix | 6.5.8 |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2000-0733