CVE-2002-0652

xfsmd for IRIX 6.5 through 6.5.16 allows remote attackers to execute arbitrary code via shell metacharacters that are not properly filtered from several calls to the popen() function, such as export_fs().

Affected products

Irix, Xfsmd

Sgi Irix

= 6.5, 6.5.1, 6.5.2, 6.5.3, 6.5.4, 6.5.5, 6.5.6, 6.5.7, 6.5.8, 6.5.9, 6.5.10, 6.5.11, 6.5.12, 6.5.13, 6.5.14, 6.5.15, 6.5.16

Fix

Available

CVSS 2.0

7.5 HIGH

EPSS

9.1% (95th percentile)

NVD status

Modified

Published

2002-07-01