Cray Unicos — known CVE vulnerabilities

Every CVE whose affected-product data names Cray Unicos, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-1999-0099 — CVSS 10.0 (critical): Buffer overflow in syslog utility allows local or remote attackers to gain root privileges.
• CVE-1999-0692 — CVSS 10.0 (critical): The default configuration of the Array Services daemon (arrayd) disables authentication, allowing remote users to gain root privileges.
• CVE-2003-0028 — CVSS 7.5 (high): Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived…
• CVE-1999-0041 — CVSS 7.5 (high): Buffer overflow in NLS (Natural Language Service).
• CVE-2006-0178 — CVSS 7.2 (high): Format string vulnerability in /bin/ftp in UNICOS 9.0.2.2 allows local users to have an unknown impact via format string specifiers in the…
• CVE-2001-0891 — CVSS 7.2 (high): Format string vulnerability in NQS daemon (nqsdaemon) in NQE 3.3.0.16 for CRAY UNICOS and SGI IRIX allows a local user to gain root…
• CVE-2006-0177 — CVSS 7.2 (high): Multiple buffer overflows in Cray UNICOS 9.0.2.2 might allow local users to gain privileges by (1) invoking /usr/bin/script with a long…
• CVE-1999-1468 — CVSS 6.2 (medium): rdist in various UNIX systems uses popen to execute sendmail, which allows local users to gain root privileges by modifying the IFS…
• CVE-1999-1300 — CVSS 3.6 (low): Vulnerability in accton in Cray UNICOS 6.1 and 6.0 allows local users to read arbitrary files and modify system accounting configuration.