Dashboard / CVE-2001-0891

CVE-2001-0891

HIGH
MEDIUM Priority: 0.03 BB Relevance: 24/100
Published: 2002-01-31 Modified: 2026-11-12 First seen: 2026-11-12 Status: active

Attack Surface

Low Complexity

CVSS Vector Breakdown

AV: Local
AC: Low
C: C
I: C
A: C

Description

Format string vulnerability in NQS daemon (nqsdaemon) in NQE 3.3.0.16 for CRAY UNICOS and SGI IRIX allows a local user to gain root privileges by using qsub to submit a batch job whose name contains formatting characters.

Affected Software (2)

VendorProductVersion
cray unicos *
sgi nqsdaemon 3.3.0.16

References & Advisories (5)

Bug Bounty Relevance

24 / 100
✓ Low complexity

CVSS Score

7.2 / 10.0 v2.0
AV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS — Exploitation Probability

0.35%
Raw Score 0.003490
Percentile 29.0%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00349
2026-11-13
0.00349
2026-11-12
0.00349
2026-11-10
0.00349

Intelligence Sources

nvd ref →

External Links