CVE-2000-0733

Published: Oct 20, 2000Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to execute arbitrary commands via a long RLD variable in the IAC-SB-TELOPT_ENVIRON request.

Affected (20)

Products: Sgi: Irix

Sgi

1 product

Irix

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Sgi Irix	Version 5.2
Sgi Irix	Version 5.3
Sgi Irix	Version 5.3
Sgi Irix	Version 6.0.1
Sgi Irix	Version 6.0.1
Sgi Irix	Version 6.0
Sgi Irix	Version 6.1
Sgi Irix	Version 6.2
Sgi Irix	Version 6.3
Sgi Irix	Version 6.4
Sgi Irix	Version 6.5.1
Sgi Irix	Version 6.5.2m
Sgi Irix	Version 6.5.3
Sgi Irix	Version 6.5.3f
Sgi Irix	Version 6.5.3m
Sgi Irix	Version 6.5.4
Sgi Irix	Version 6.5.6
Sgi Irix	Version 6.5.7
Sgi Irix	Version 6.5.8
Sgi Irix	Version 6.5