CVE-2001-0823

CVE-2001-0823 describes a local privilege escalation vulnerability affecting SGI Performance Co-Pilot (PCP) versions prior to 2.2.1-3. An attacker can exploit this flaw by creating a symbolic link to the NOTICES file within the PCP log directory, allowing them to gain elevated privileges on the system. This vulnerability has a CVSS score of 7.2 (High), indicating a significant impact with full confidentiality, integrity, and availability compromise possible through a low-complexity local attack. While not listed on CISA's KEV catalog, an ExploitDB entry (EDB-20937) confirms the existence of exploit code, though there is no evidence of active exploitation or significant community discussion.