Vulnerabilities > CVE-2001-0891
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
Format string vulnerability in NQS daemon (nqsdaemon) in NQE 3.3.0.16 for CRAY UNICOS and SGI IRIX allows a local user to gain root privileges by using qsub to submit a batch job whose name contains formatting characters.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 | |
| OS | 1 |
References
- ftp://patches.sgi.com/support/free/security/advisories/20020101-01-I
- ftp://patches.sgi.com/support/free/security/advisories/20020101-01-I
- http://marc.info/?l=bugtraq&m=100695627423924&w=2
- http://marc.info/?l=bugtraq&m=100695627423924&w=2
- http://www.osvdb.org/3275
- http://www.osvdb.org/3275
- http://www.securityfocus.com/bid/3590
- http://www.securityfocus.com/bid/3590
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7618
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7618