PT-2007-4098 · Globus+1 · Gram2+3

Publicado 2007-05-21 · Atualizado 2017-07-29 · CVE-2007-2784

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Globus Toolkit versions 4.1.1 and earlier globus nexus versions 6.6 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in resource exhaustion and system crash, by sending certain requests to temporary TCP ports for a GRAM2 job or its MPICH-G2 applications.

Recommendations For Globus Toolkit versions 4.1.1 and earlier, update to a version later than 4.1.1 to resolve the issue. For globus nexus versions 6.6 and earlier, update to a version later than 6.6 to resolve the issue.

Correção

Identificadores relacionados

CVE-2007-2784

Produtos afetados

Gram2

Globus Toolkit

Mpich-G2

Globus Nexus

Referências · 8

• http://globus.org/mail_archive/security-announce/2007/05/msg00000.html · Correção
• http://globus.org/toolkit/advisories.html · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34374 · Nota
• http://osvdb.org/36094 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2784 · Nota de Segurança
• http://secunia.com/advisories/25323 · Aviso do Fabricante
• http://securityfocus.com/bid/24051 · Nota
• http://bugzilla.globus.org/globus/show_bug.cgi?id=5297 · Nota