Vulnerability in Sgi Performance Co-Pilot

CVE-2001-0823

The pmpost program in Performance Co-Pilot (PCP) before 2.2.1-3 allows a local user to gain privileges via a symlink attack on the NOTICES file in the PCP log directory (PCP_LOG_DIR).

EPSS: 0.010 (58.5th percentile) — read the EPSS interpretation.

Affected products

Sgi Performance_co-pilot — versions 2.1.1, 2.1.2, 2.1.3
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ, Patch)
cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)