CVE-2001-0891 Format string vulnerability in NQS daemon (nqsdaemon) in NQE 3.3.0.16 for CRAY UNICOS and SGI IRIX allows a local user to gain root privileges by using qsub to submit a batch job whose name contains f...
HighCVSS 7.2
EPSS 0.35%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in NQS daemon (nqsdaemon) in NQE 3.3.0.16 for CRAY UNICOS and SGI IRIX allows a local user to gain root privileges by using qsub to submit a batch job whose name contains formatting characters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sgi nqsdaemon | = 3.3.0.16 | No fix listed |
| cray unicos | All versions | No fix listed |
References
- 20011127 UNICOS LOCAL HOLE ALL VERSIONS mailing-list
- 3275 vdb-entry
- 3590 vdb-entry
- unicos-nqsd-format-string(7618) vdb-entry