PT-2009-4537 · Simple Linux Utility For Resource Management · Slurm

Thijs Kinkhorst · Publicado 2009-06-16 · Atualizado 2017-08-17 · CVE-2009-2084

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Simple Linux Utility for Resource Management (SLURM) versions 1.2 through 1.3.13

Description The issue arises from the improper setting of supplementary groups before invoking certain commands from the daemon, potentially allowing local users to modify files and gain privileges.

Recommendations For versions 1.2 through 1.3.13, update to version 1.3.14 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2009-2084

DSA-1776-1

Produtos afetados

Slurm

Referências · 9

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=524980 · Nota
• http://sourceforge.net/project/shownotes.php?release_id=676055&group_id=157944 · Nota
• http://securityfocus.com/bid/34638 · Correção
• http://debian.org/security/2009/dsa-1776 · Correção, Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50127 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-2084 · Nota de Segurança
• http://secunia.com/advisories/34831 · Aviso do Fabricante
• http://vupen.com/english/advisories/2009/1128 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50126 · Nota