Vulnerability Details : CVE-2001-0891
Format string vulnerability in NQS daemon (nqsdaemon) in NQE 3.3.0.16 for CRAY UNICOS and SGI IRIX allows a local user to gain root privileges by using qsub to submit a batch job whose name contains formatting characters.
Exploit prediction scoring system (EPSS) score for CVE-2001-0891
Probability of exploitation activity in the next 30 days: 0.06%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 22 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2001-0891
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
7.2
|
HIGH | AV:L/AC:L/Au:N/C:C/I:C/A:C |
3.9
|
10.0
|
NIST |
References for CVE-2001-0891
Products affected by CVE-2001-0891
- cpe:2.3:a:sgi:nqsdaemon:3.3.0.16:*:*:*:*:*:*:*
- cpe:2.3:o:cray:unicos:*:*:*:*:*:*:*:*