[email protected]CVE-2001-0823

HistoryDec 06, 2001 - 5:00 a.m.

CVE-2001-0823

2001-12-0605:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2001-0823

performance co-pilot

pcp

pmpost

privilege escalation

symlink attack.

6.8 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

0.4%

JSON

The pmpost program in Performance Co-Pilot (PCP) before 2.2.1-3 allows a local user to gain privileges via a symlink attack on the NOTICES file in the PCP log directory (PCP_LOG_DIR).

CPENameOperatorVersion
sgi:performance_co-pilotsgi performance co-piloteq2.1.7
sgi:performance_co-pilotsgi performance co-piloteq2.1.9
sgi:performance_co-pilotsgi performance co-piloteq2.1.10
sgi:performance_co-pilotsgi performance co-piloteq2.1.11
sgi:performance_co-pilotsgi performance co-piloteq2.2
sgi:performance_co-pilotsgi performance co-piloteq2.1.3
sgi:performance_co-pilotsgi performance co-piloteq2.1.5
sgi:performance_co-pilotsgi performance co-piloteq2.1.2
sgi:performance_co-pilotsgi performance co-piloteq2.1.6
sgi:performance_co-pilotsgi performance co-piloteq2.1.8

CPE	Name	Operator	Version
sgi:performance_co-pilot	sgi performance co-pilot	eq	2.1.7
sgi:performance_co-pilot	sgi performance co-pilot	eq	2.1.9
sgi:performance_co-pilot	sgi performance co-pilot	eq	2.1.10
sgi:performance_co-pilot	sgi performance co-pilot	eq	2.1.11
sgi:performance_co-pilot	sgi performance co-pilot	eq	2.2
sgi:performance_co-pilot	sgi performance co-pilot	eq	2.1.3
sgi:performance_co-pilot	sgi performance co-pilot	eq	2.1.5
sgi:performance_co-pilot	sgi performance co-pilot	eq	2.1.2
sgi:performance_co-pilot	sgi performance co-pilot	eq	2.1.6
sgi:performance_co-pilot	sgi performance co-pilot	eq	2.1.8

Rows per page:

1-10 of 121

References

ftp://patches.sgi.com/support/free/security/advisories/20010601-01-A

archives.neohapsis.com/archives/bugtraq/2001-06/0245.html

marc.info/?l=bugtraq&m=99290754901708&w=2

www.securityfocus.com/bid/2887

exchange.xforce.ibmcloud.com/vulnerabilities/6724

6.8 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

0.4%

JSON

Related for CVE-2001-0823

securityvulns1 cvelist1