PT-2004-1471 · Ibm · Load Sharing Facility

Tomasz Grabowski · Published 2004-03-18 · Updated 2017-07-11 · CVE-2004-0317

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Load Sharing Facility versions 4.x through 6.x

Description The issue is related to a buffer overflow in the eauth component, which can be triggered by a long LSF From PC parameter. This can cause a denial of service, resulting in a segmentation fault, and potentially allow the execution of arbitrary code. The attack can be conducted by local users or remote attackers within the LSF cluster.

Recommendations For Load Sharing Facility versions 4.x through 6.x, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2004-0317

Affected Products

Load Sharing Facility

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2004-0317 · Security Note
• http://securityfocus.com/bid/9719 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=107756611501236&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15282 · Note