Cray

10 CVEs across 3 Cray products. Browse Cray vulnerabilities, severities, and proof-of-concept exploits.

Cray products with known CVEs

ProductCVEs
Unicos9
Cray Linux Environment1
Unicos Max1
Cray CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2014-07482014-12-27apinit on Cray devices with CLE before 4.2.UP02 and 5.x before 5.1.UP00 does not use alpsauth data to validate the UID in a launch message, which allows local…
CVE-2006-01782006-01-11Format string vulnerability in /bin/ftp in UNICOS 9.0.2.2 allows local users to have an unknown impact via format string specifiers in the quote command. NOTE…
CVE-2006-01772006-01-11Multiple buffer overflows in Cray UNICOS 9.0.2.2 might allow local users to gain privileges by (1) invoking /usr/bin/script with a long command line argument o…
CVE-2003-00282003-03-25Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, includin…
CVE-2001-08912002-01-31Format string vulnerability in NQS daemon (nqsdaemon) in NQE 3.3.0.16 for CRAY UNICOS and SGI IRIX allows a local user to gain root privileges by using qsub to…
CVE-1999-13001999-12-31Vulnerability in accton in Cray UNICOS 6.1 and 6.0 allows local users to read arbitrary files and modify system accounting configuration.
CVE-1999-06921999-07-19The default configuration of the Array Services daemon (arrayd) disables authentication, allowing remote users to gain root privileges.
CVE-1999-00411997-02-13Buffer overflow in NLS (Natural Language Service).
CVE-1999-00991995-10-19Buffer overflow in syslog utility allows local or remote attackers to gain root privileges.
CVE-1999-14681991-10-22rdist in various UNIX systems uses popen to execute sendmail, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator)…