Sgi Performance Co-pilot — known CVE vulnerabilities

Every CVE whose affected-product data names Sgi Performance Co-pilot, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2001-0823 — CVSS 7.2 (high): The pmpost program in Performance Co-Pilot (PCP) before 2.2.1-3 allows a local user to gain privileges via a symlink attack on the NOTICES…
• CVE-2023-6917 — CVSS 6.0 (medium): A vulnerability has been identified in the Performance Co-Pilot (PCP) package, stemming from the mixed privilege levels utilized by systemd…
• CVE-2012-3419 — CVSS 5.0 (medium): Performance Co-Pilot (PCP) before 3.6.5 exports some of the /proc file system, which allows attackers to obtain sensitive information such…
• CVE-2012-3421 — CVSS 5.0 (medium): The pduread function in pdu.c in libpcp in Performance Co-Pilot (PCP) before 3.6.5 does not properly time out connections, which allows…
• CVE-2012-3420 — CVSS 5.0 (medium): Multiple memory leaks in Performance Co-Pilot (PCP) before 3.6.5 allow remote attackers to cause a denial of service (memory consumption or…
• CVE-2012-3418 — CVSS 5.0 (medium): libpcp in Performance Co-Pilot (PCP) before 3.6.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code…
• CVE-2012-5530 — CVSS 2.1 (low): The (1) pcmd and (2) pmlogger init scripts in Performance Co-Pilot (PCP) before 3.6.10 allow local users to overwrite arbitrary files via a…