The pmpost program in Performance Co-Pilot (PCP) before 2.2.1-3 allows a local user to gain privileges via a symlink attack on the NOTICES f

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• sgi performance co-pilot2.1.1
• sgi performance co-pilot2.1.10
• sgi performance co-pilot2.1.11
• sgi performance co-pilot2.1.2
• sgi performance co-pilot2.1.3
• sgi performance co-pilot2.1.4
• sgi performance co-pilot2.1.5
• sgi performance co-pilot2.1.6
• sgi performance co-pilot2.1.7
• sgi performance co-pilot2.1.8
• sgi performance co-pilot2.1.9
• sgi performance co-pilot2.2

Other highest-scoring records for the same primary product.

• CVE-2023-6917Pcp: unsafe use of directories allows pcp to root privilege escalation
  26Monitor
• CVE-2012-3418libpcp in Performance Co-Pilot (PCP) before 3.6.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code v
  22Monitor
• CVE-2012-3421The pduread function in pdu.c in libpcp in Performance Co-Pilot (PCP) before 3.6.5 does not properly time out connections, which allows remo
  21Monitor
• CVE-2012-3420Multiple memory leaks in Performance Co-Pilot (PCP) before 3.6.5 allow remote attackers to cause a denial of service (memory consumption or
  21Monitor
• CVE-2012-3419Performance Co-Pilot (PCP) before 3.6.5 exports some of the /proc file system, which allows attackers to obtain sensitive information such a
  21Monitor
• CVE-2012-5530The (1) pcmd and (2) pmlogger init scripts in Performance Co-Pilot (PCP) before 3.6.10 allow local users to overwrite arbitrary files via a
  8Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

MITRE has no CAPEC/ATT&CK mapping for this CWE.