Back
CVE-2001-0891
Format string vulnerability in NQS daemon (nqsdaemon) in NQE 3.3.0.16 for CRAY UNICOS and SGI IRIX allows a local user to gain root privileges by using qsub to submit a batch job whose name contains formatting characters.
Published: Jan 31, 2002
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (2)
| Vendor | Product | Version |
|---|---|---|
| sgi | nqsdaemon | 3.3.0.16 |
| cray | unicos | * |
GitHub Security Advisory GHSA-q65q-qcpw-j37q
Format string vulnerability in NQS daemon (nqsdaemon) in NQE 3.3.0.16 for CRAY UNICOS and SGI...
References (10)
- ftp://patches.sgi.com/support/free/security/advisories/20020101-01-I Patch, Vendor Advisory
- http://marc.info/?l=bugtraq&m=100695627423924&w=2
- http://www.osvdb.org/3275
- http://www.securityfocus.com/bid/3590
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7618
- ftp://patches.sgi.com/support/free/security/advisories/20020101-01-I Patch, Vendor Advisory
- http://marc.info/?l=bugtraq&m=100695627423924&w=2
- http://www.osvdb.org/3275
- http://www.securityfocus.com/bid/3590
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7618
Risk Scores
CVSS Score
7.2 / 10
EPSS Score
0.35%
Top 72% most likely to be exploited
Threat Score
28.9 / 100
Data Sources
NVD
EPSS
GitHub