CVE-2001-0891: Cray Unicos

High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days.

Format string vulnerability in NQS daemon (nqsdaemon) in NQE 3.3.0.16 for CRAY UNICOS and SGI IRIX allows a local user to gain root privileges by using qsub to submit a batch job whose name contains formatting characters.

Affected products

  • Cray Unicos: any version
  • Sgi Nqsdaemon: version 3.3.0.16 only

Published 2002-01-31. Last modified 2026-06-16.