← Vulnerability feed

Vulnerability record · CVE-2001-0823 · published 6 December 2001

CVE-2001-0823: Sgi performance co-pilot vulnerability

Sgi · Performance Co Pilot

The pmpost program in Performance Co-Pilot (PCP) before 2.2.1-3 allows a local user to gain privileges via a symlink attack on the NOTICES file in the PCP log directory (PCP_LOG_DIR).

7.2 CVSS 2.0 High EPSS 0.98% · top 39.4%
7.2CVSS 2.0 base score
0.98%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
10References, 2 tagged exploit
16 Jun 2026Last modified by NVD

Description

The pmpost program in Performance Co-Pilot (PCP) before 2.2.1-3 allows a local user to gain privileges via a symlink attack on the NOTICES file in the PCP log directory (PCP_LOG_DIR).

AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
ftp://patches.sgi.com/support/free/security/advisories/20010601-01-A Patch
http://archives.neohapsis.com/archives/bugtraq/2001-06/0245.html PatchVendor Advisory
http://marc.info/?l=bugtraq&m=99290754901708&w=2
http://www.securityfocus.com/bid/2887 ExploitPatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6724
ftp://patches.sgi.com/support/free/security/advisories/20010601-01-A Patch
http://archives.neohapsis.com/archives/bugtraq/2001-06/0245.html PatchVendor Advisory
http://marc.info/?l=bugtraq&m=99290754901708&w=2
http://www.securityfocus.com/bid/2887 ExploitPatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6724

Track CVE-2001-0823 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

6.7CVE-2023-6917Sgi performance co-pilot toctou race condition vulnerabilityA vulnerability has been identified in the Performance Co-Pilot (PCP) package, stemming from the mixed privilege levels utilized by systemd services …EPSS 0.20%5.0CVE-2012-3418Sgi performance co-pilot vulnerabilitylibpcp in Performance Co-Pilot (PCP) before 3.6.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a …EPSS 5.7%5.0CVE-2012-3419Sgi performance co-pilot information exposure vulnerabilityPerformance Co-Pilot (PCP) before 3.6.5 exports some of the /proc file system, which allows attackers to obtain sensitive information such as proc/pi…EPSS 1.8%5.0CVE-2012-3420Sgi performance co-pilot vulnerabilityMultiple memory leaks in Performance Co-Pilot (PCP) before 3.6.5 allow remote attackers to cause a denial of service (memory consumption or daemon cr…EPSS 2.4%5.0CVE-2012-3421Sgi performance co-pilot vulnerabilityThe pduread function in pdu.c in libpcp in Performance Co-Pilot (PCP) before 3.6.5 does not properly time out connections, which allows remote attack…EPSS 3.3%2.1CVE-2012-5530Sgi performance co-pilot permissions and access controls vulnerabilityThe (1) pcmd and (2) pmlogger init scripts in Performance Co-Pilot (PCP) before 3.6.10 allow local users to overwrite arbitrary files via a symlink a…EPSS 0.37%

Source: NIST National Vulnerability Database (record CVE-2001-0823), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.