CVE Vulnerabilities

CVE-2004-0318

Published: Nov 23, 2004 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

Load Sharing Facility (LSF) 4.x, 5.x, and 6.x uses the LSF_EAUTH_UID environment variable, if it exists, instead of the real UID of the user, which could allow remote attackers within the local cluster to gain privileges.

Affected Software

Name Vendor Start Version End Version
Lsf Platform 4.0 4.0
Lsf Platform 4.2 4.2
Lsf Platform 5.0 5.0
Lsf Platform 5.1 5.1
Lsf Platform 6.0 6.0

References