CVE-2002-0652: Sgi Irix

High severity, CVSS 7.5. EPSS: 9.1% chance of exploitation in the next 30 days.

xfsmd for IRIX 6.5 through 6.5.16 allows remote attackers to execute arbitrary code via shell metacharacters that are not properly filtered from several calls to the popen() function, such as export_fs().

Affected products

• Sgi Irix: version 6.5 only; version 6.5.1 only; version 6.5.2 only; version 6.5.3 only; version 6.5.4 only; version 6.5.5 only; …

Published 2002-07-03. Last modified 2026-06-16.