GCVE-110-CERTCC-2002-195371

Advisory Published

Vulnetix · Advisory published June 18, 2002

The XFS journaling filesystem daemon uses a call to popen(3) with unfiltered client-controlled input. This will lead to arbitrary command execution on remote systems.

Download JSON Open in Console

Risk Scores

certcc-cam

impact20population8exploitation15widely_known20score_current35.1ease_of_exploitation15

certcc-vrda

d1_impact2d1_population2d1_direct_report0

Aliases

CVE-2002-0359

References

SGI IRIX rpc.xfsmd does not filter shell metacharacters from user input before invoking popen() function

advisory

SGI IRIX rpc.xfsmd does not filter shell metacharacters from user input before invoking popen() function

url

SGI IRIX rpc.xfsmd does not filter shell metacharacters from user input before invoking popen() function

url

SGI IRIX rpc.xfsmd does not filter shell metacharacters from user input before invoking popen() function

url

SGI IRIX rpc.xfsmd does not filter shell metacharacters from user input before invoking popen() function

url

SGI IRIX rpc.xfsmd does not filter shell metacharacters from user input before invoking popen() function

url

Browse GCVE Records

72,409 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON