CVE-2001-0800

lpsched in IRIX 6.5.13f and earlier allows remote attackers to execute arbitrary commands via shell metacharacters

published November 22, 2001

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.0th percentile for exploit probability.

CVSS
—
EPSS
54%
Percentile
99.0
In the wild
Unconfirmed
What it is

⚡ A crafty use of shell metacharacters lets attackers remotely execute commands in IRIX 6.5.13f and earlier — like a chef swapping out ingredients without anyone noticing! 🍽️ Imagine a restaurant where the chef can change the whole menu just by writing a note on the order pad! That's how this vulnerability lets an attacker manipulate commands without authorization, sneaking in their own recipes for destruction. If exploited, a remote attacker could gain the power to run arbitrary commands on the affected system. This means they could access sensitive data, alter configurations, or even bring the entire system to its knees — absolutely devastating!

Put simply

Imagine a restaurant where the chef can change the whole menu just by writing a note on the order pad! That's how this vulnerability lets an attacker manipulate commands without authorization, sneaking in their own recipes for destruction. This vulnerability in lpsched allows an attacker to execute arbitrary shell commands by injecting shell metacharacters, effectively bypassing standard security checks that are supposed to restrict command execution.

What to do

If exploited, a remote attacker could gain the power to run arbitrary commands on the affected system. This means they could access sensitive data, alter configurations, or even bring the entire system to its knees — absolutely devastating! To remediate, ensure you upgrade to IRIX 6.5.14 or later, where this vulnerability has been patched. Additionally, review your system’s command execution policies and restrict any unnecessary access to the lpsched service. You've got this! By taking these steps, you'll protect your system from this vulnerability and keep the bad guys at bay! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.54115 · 99.0th percentile
Published
2001-11-22T05:00Z
EPSS history
Timeline
  • 22 NOV 05:00Z
    lpsched in IRIX 6.5.13f and earlier allows remote attackers to execute arbitrary commands via shell metacharacters
    cvelistv5