PT-2004-1471 · Ibm · Load Sharing Facility

Tomasz Grabowski · Publicado 2004-03-18 · Atualizado 2017-07-11 · CVE-2004-0317

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Load Sharing Facility versions 4.x through 6.x

Description The issue is related to a buffer overflow in the eauth component, which can be triggered by a long LSF From PC parameter. This can cause a denial of service, resulting in a segmentation fault, and potentially allow the execution of arbitrary code. The attack can be conducted by local users or remote attackers within the LSF cluster.

Recommendations For Load Sharing Facility versions 4.x through 6.x, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2004-0317

Produtos afetados

Load Sharing Facility

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2004-0317 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=107756611501236&w=2 · Nota
• http://securityfocus.com/bid/9719 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15282 · Nota