{"id":"CVE-2002-0652","aliases":["EUVD-2002-0646","GHSA-p79g-753v-646v"],"status":"published","title":"xfsmd for IRIX 6.5 through 6.5.16 allows remote attackers to execute arbitrary code via shell...","description":"xfsmd for IRIX 6.5 through 6.5.16 allows remote attackers to execute arbitrary code via shell metacharacters that are not properly filtered from several calls to the popen() function, such as export_fs().","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.09148,"percentile":0.95354,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2002-07-01T04:00:00Z","modified":"2026-06-16T21:57:52Z","exploits":[{"source":"exploitdb","id":"EDB-21571","title":"SGI IRIX 6.x - 'rpc.xfsmd' Remote Command Execution","type":"remote","platform":"irix","date":"2002-06-20","verified":true,"url":"https://www.exploit-db.com/exploits/21571"}],"products":[{"vendor":"sgi","product":"irix"}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020606-01-I","tags":["vendor-advisory","x_refsource_SGI","x_transferred","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq\u0026m=102459162909825\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020605-01-I","tags":["vendor-advisory","x_refsource_SGI","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2002-0652"},{"url":"https://github.com/advisories/GHSA-p79g-753v-646v"}],"sources":{"cve":[{"id":"CVE-2002-0652","description":"xfsmd for IRIX 6.5 through 6.5.16 allows remote attackers to execute arbitrary code via shell metacharacters that are not properly filtered from several calls to the popen() function, such as export_fs().","status":"published","published":"2002-07-01T04:00:00Z","modified":"2024-08-08T02:56:38.394Z","updated_at":"2026-11-02T14:33:55.642267Z"}],"euvd":[{"id":"EUVD-2002-0646","description":"xfsmd for IRIX 6.5 through 6.5.16 allows remote attackers to execute arbitrary code via shell metacharacters that are not properly filtered from several calls to the popen() function, such as export_fs().","status":"published","published":"2002-07-01T04:00:00Z","modified":"2024-08-08T02:56:38Z","updated_at":"2026-11-03T01:14:59.632362Z"}],"ghsa":[{"id":"GHSA-p79g-753v-646v","title":"xfsmd for IRIX 6.5 through 6.5.16 allows remote attackers to execute arbitrary code via shell...","description":"xfsmd for IRIX 6.5 through 6.5.16 allows remote attackers to execute arbitrary code via shell metacharacters that are not properly filtered from several calls to the popen() function, such as export_fs().","status":"published","published":"2022-05-03T03:07:56Z","modified":"2023-02-01T05:01:03Z","updated_at":"2026-11-02T14:49:39.648637Z"}],"nvd":[{"id":"CVE-2002-0652","description":"xfsmd for IRIX 6.5 through 6.5.16 allows remote attackers to execute arbitrary code via shell metacharacters that are not properly filtered from several calls to the popen() function, such as export_fs().","status":"published","published":"2002-07-03T04:00:00Z","modified":"2026-06-16T21:57:52.16Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:42.220505Z"}]}}