PT-2006-4787 · Sun · Sun N1 Grid Engine

Published 2006-07-31 · Updated 2017-07-20 · CVE-2006-3941

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sun N1 Grid Engine versions 5.3 through 6.0

Description The issue allows local users to cause a denial of service, potentially shutting down the grid service, and may also enable the execution of arbitrary code through buffer overflows. This can be achieved by terminating the qmaster or execd daemons via unknown vectors.

Recommendations For Sun N1 Grid Engine versions 5.3 through 6.0, update to a version that includes a fix for this issue to prevent potential denial of service and arbitrary code execution.

Fix

Related Identifiers

CVE-2006-3941

Affected Products

Sun N1 Grid Engine

References · 10

• http://vupen.com/english/advisories/2006/3066 · Vendor Advisory
• http://securitytracker.com/id?1016607 · Patch
• http://secunia.com/advisories/21185 · Vendor Advisory
• http://securityfocus.com/bid/19218 · Patch
• http://secunia.com/advisories/22425 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-3941 · Security Note
• http://support.avaya.com/elmodocs2/security/ASA-2006-204.htm · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28083 · Note
• http://osvdb.org/27639 · Note
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102322-1 · Patch, Vendor Advisory