Login Request a demo
Unscored severity · published Jan 31, 2002
CVE-2001-0891
Format string vulnerability in NQS daemon (nqsdaemon) in NQE 3.3.0.16 for CRAY UNICOS and SGI IRIX allows a local user to gain root privileges by using qsub to submit a batch job…
–
CVSS
0.3%
EPSS
No
On KEV
Description
Format string vulnerability in NQS daemon (nqsdaemon) in NQE 3.3.0.16 for CRAY UNICOS and SGI IRIX allows a local user to gain root privileges by using qsub to submit a batch job whose name contains formatting characters.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NQ
Nqsdaemon · Sgi
3.3.0.16 · source: NVD
UN
Unicos · Cray
All versions, or not specified · source: NVD
Affected product
UN
Unicos
Cray
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-0891
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-0891
marc.info
http://marc.info/?l=bugtraq&m=100695627423924&w=2
www.osvdb.org
http://www.osvdb.org/3275
www.securityfocus.com
http://www.securityfocus.com/bid/3590
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/7618
More from Unicos
–
CVE-2006-0178
Format string vulnerability in /bin/ftp in UNICOS 9.0.2.2 allows local users to have an unknown impact via format string specifiers in the quote command
–
CVE-2006-0177
Multiple buffer overflows in Cray UNICOS 9.0.2.2 might allow local users to gain privileges by (1) invoking /usr/bin/script with a long command line argument or (2) setting the -c…
–
CVE-2003-0028
Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc,…
–
CVE-1999-1300
Vulnerability in accton in Cray UNICOS 6.1 and 6.0 allows local users to read arbitrary files and modify system accounting configuration
–
CVE-1999-0692
The default configuration of the Array Services daemon (arrayd) disables authentication, allowing remote users to gain root privileges