CVE-2001-0891: High severity sgi nqsdaemon vulnerability
Published Jan 31, 2002
·Updated
Format string vulnerability in NQS daemon (nqsdaemon) in NQE 3.3.0.16 for CRAY UNICOS and SGI IRIX allows a local user to gain root privileges by using qsub to submit a batch job whose name contains formatting characters.
Affected Software
2 affected components
SGI nqsdaemon=3.3.0.16
CRAY UNICOS
Remediation
Event History
Jan 31, 2002
CVE Published
05:00 AM
Apr 2, 2003
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-0891?
CVE-2001-0891 is classified as a high severity vulnerability due to its potential to allow local users to gain root privileges.
2
How do I fix CVE-2001-0891?
To remediate CVE-2001-0891, update NQS daemon to version 3.3.0.17 or later.
3
Who is affected by CVE-2001-0891?
CVE-2001-0891 affects users of NQS daemon version 3.3.0.16 on Cray UNICOS and SGI IRIX systems.
4
What does CVE-2001-0891 exploit?
CVE-2001-0891 exploits a format string vulnerability in the NQS daemon allowing escalation of privileges when submitting jobs.
5
Is CVE-2001-0891 a local or remote vulnerability?
CVE-2001-0891 is a local vulnerability that requires local access to the affected system.