CVE-2001-0823

Description

The pmpost program in Performance Co-Pilot (PCP) before 2.2.1-3 allows a local user to gain privileges via a symlink attack on the NOTICES file in the PCP log directory (PCP_LOG_DIR).

Affected products

• sgi / performance_co-pilot2.1.1 – 2.1.1
• sgi / performance_co-pilot2.1.2 – 2.1.2
• sgi / performance_co-pilot2.1.3 – 2.1.3
• sgi / performance_co-pilot2.1.4 – 2.1.4
• sgi / performance_co-pilot2.1.5 – 2.1.5
• sgi / performance_co-pilot2.1.6 – 2.1.6
• sgi / performance_co-pilot2.1.7 – 2.1.7
• sgi / performance_co-pilot2.1.8 – 2.1.8
• sgi / performance_co-pilot2.1.9 – 2.1.9
• sgi / performance_co-pilot2.1.10 – 2.1.10
• sgi / performance_co-pilot2.1.11 – 2.1.11
• sgi / performance_co-pilot2.2 – 2.2

References

• MAILING_LISThttp://marc.info/?l=bugtraq&m=99290754901708&w=2
• MISChttp://archives.neohapsis.com/archives/bugtraq/2001-06/0245.html
• MISChttp://www.securityfocus.com/bid/2887
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/6724
• VENDOR_ADVISORYftp://patches.sgi.com/support/free/security/advisories/20010601-01-A