CVE:CVE-2001-0891
CNNVD:CNNVD-200201-023
CRAY UNICOS和SGI IRIX中NQE 3.3.0.16版本的NQS守护程序(nqsdaemon)存在格式字符串漏洞。本地用户通过使用qsub提交一批名字中包含格式化字符的工作提升根特权。
solution:Upgrade sgi nqsdaemon to a higher version than 3.3.0.16,and avoid the version 3.3.0.16; Upgrade cray unicos to a higher version than *