National Vulnerability Database (CVE-2000-0733)

National Cyber-Alert System Vulnerability Summary: CVE-2000-0733
Orirignal release date: 2000-10-20 Source: US-CERT/NIST ### Overview Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to execute arbitrary commands via a long RLD variable in the IAC-SB-TELOPT_ENVIRON request. ### Impact CVSS Severity: 10 (High) Range: remote Authentication: access Impact Type: sec_prot admin="1" ### Reference to Advisories, Solutions, and Tools External Source: Bugtraq Name: 20000814 Hyperlink: http://archives.neohapsis.com/archives/bugtraq/2000-08/0154.html External Source: Security Focus Name: BID 1572 Hyperlink: http://www.securityfocus.com/bid/1572 ### Vulnerable Software and Vendor IRIX (SGI) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0733