PT-2007-4098 · Globus+1 · Gram2+3

Published 2007-05-21 · Updated 2017-07-29 · CVE-2007-2784

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Globus Toolkit versions 4.1.1 and earlier globus nexus versions 6.6 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in resource exhaustion and system crash, by sending certain requests to temporary TCP ports for a GRAM2 job or its MPICH-G2 applications.

Recommendations For Globus Toolkit versions 4.1.1 and earlier, update to a version later than 4.1.1 to resolve the issue. For globus nexus versions 6.6 and earlier, update to a version later than 6.6 to resolve the issue.

Fix

Related Identifiers

CVE-2007-2784

Affected Products

Gram2

Globus Toolkit

Mpich-G2

Globus Nexus

References · 8

• http://globus.org/mail_archive/security-announce/2007/05/msg00000.html · Patch
• http://globus.org/toolkit/advisories.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-2784 · Security Note
• http://secunia.com/advisories/25323 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34374 · Note
• http://osvdb.org/36094 · Note
• http://securityfocus.com/bid/24051 · Note
• http://bugzilla.globus.org/globus/show_bug.cgi?id=5297 · Note