Description
Format string vulnerability in NQS daemon (nqsdaemon) in NQE 3.3.0.16 for CRAY UNICOS and SGI IRIX allows a local user to gain root privileges by using qsub to submit a batch job whose name contains formatting characters.
References
- 3275 vdb-entry
- 20011127 UNICOS LOCAL HOLE ALL VERSIONS mailing-list
- 3590 vdb-entry
- unicos-nqsd-format-string(7618) vdb-entry