CyberSec.Space Logo
Back to CVE Browser

CVE-2000-0733

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0760%
EPSS Percentile5.21th
PublishedOct 20, 2000
Last ModifiedApr 16, 2026

Vulnerability Description

Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to execute arbitrary commands via a long RLD variable in the IAC-SB-TELOPT_ENVIRON request.

Affected Platforms (CPE)

💻
Sgi

Irix

= 5.2
💻
Sgi

Irix

= 5.3
💻
Sgi

Irix

= 5.3
💻
Sgi

Irix

= 6.0
💻
Sgi

Irix

= 6.0.1
💻
Sgi

Irix

= 6.0.1
💻
Sgi

Irix

= 6.1
💻
Sgi

Irix

= 6.2
💻
Sgi

Irix

= 6.3
💻
Sgi

Irix

= 6.4
💻
Sgi

Irix

= 6.5
💻
Sgi

Irix

= 6.5.1
💻
Sgi

Irix

= 6.5.2m
💻
Sgi

Irix

= 6.5.3
💻
Sgi

Irix

= 6.5.3f
💻
Sgi

Irix

= 6.5.3m
💻
Sgi

Irix

= 6.5.4
💻
Sgi

Irix

= 6.5.6
💻
Sgi

Irix

= 6.5.7
💻
Sgi

Irix

= 6.5.8

References & Advisories

🔗 ftp://sgigate.sgi.com/security/20000801-02-P
🔗 http://archives.neohapsis.com/archives/bugtraq/2000-08/0154.html
🔗 http://www.securityfocus.com/bid/1572
🔗 ftp://sgigate.sgi.com/security/20000801-02-P
🔗 http://archives.neohapsis.com/archives/bugtraq/2000-08/0154.html
🔗 http://www.securityfocus.com/bid/1572

Related Vulnerabilities

CVE-1999-008810.0

IRIX and AIX automountd services (autofsd) allow remote users to execute root commands.

CVE-1999-046110.0

Versions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to insert and delete entries by spo...

CVE-1999-131910.0

Vulnerability in object server program in SGI IRIX 5.2 through 6.1 allows remote attackers to gain root privileges in certain conf...

CVE-1999-076510.0

SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor.