PT-2006-1475 · Sun · Sun Grid Engine

Published 2006-01-25 · Updated 2017-07-20 · CVE-2006-0408

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun Grid Engine (SGE) versions prior to 6.0u7 1

Description The issue in the rsh utility of Sun Grid Engine (SGE) allows local users to gain privileges and execute arbitrary code. This is possibly achieved through unspecified vectors, which may involve command line arguments.

Recommendations For versions prior to 6.0u7 1, update to version 6.0u7 1 or later to resolve the issue.

Fix

Related Identifiers

CVE-2006-0408

Affected Products

Sun Grid Engine

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2006-0408 · Security Note
• http://secunia.com/advisories/18580 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24281 · Note
• http://gridengine.sunsource.net/project/gridengine/60patches.txt · Note
• http://securityfocus.com/bid/16366 · Note
• http://vupen.com/english/advisories/2006/0308 · Note
• http://securitytracker.com/id?1015531 · Note