Lucene search

K
cve[email protected]CVE-2000-0013
HistoryJul 12, 2000 - 4:00 a.m.

CVE-2000-0013

2000-07-1204:00:00
web.nvd.nist.gov
24
cve-2000-0013
irix
soundplayer
privilege escalation
.wav file
local users
vulnerability.

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

IRIX soundplayer program allows local users to gain privileges by including shell metacharacters in a .wav file, which is executed via the midikeys program.

Affected configurations

NVD
Node
sgiirixMatch6.2
CPENameOperatorVersion
sgi:irixsgi irixeq6.2

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

Related for CVE-2000-0013