CVE Vulnerabilities

CVE-2010-3380

Published: Sep 29, 2010 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.9 MEDIUM
AV:L/AC:M/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu
LOW

The (1) init.d/slurm and (2) init.d/slurmdbd scripts in SLURM before 2.1.14 place the . (dot) directory in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Affected Software

Name Vendor Start Version End Version
Slurm Llnl * 2.1.13 (including)
Slurm Llnl 1.3.10 (including) 1.3.10 (including)
Slurm Llnl 1.3.11 (including) 1.3.11 (including)
Slurm Llnl 1.3.12 (including) 1.3.12 (including)
Slurm Llnl 1.3.13 (including) 1.3.13 (including)
Slurm Llnl 1.3.14 (including) 1.3.14 (including)
Slurm Llnl 1.3.15 (including) 1.3.15 (including)
Slurm Llnl 2.0.0 (including) 2.0.0 (including)
Slurm Llnl 2.0.1 (including) 2.0.1 (including)
Slurm Llnl 2.0.2 (including) 2.0.2 (including)
Slurm Llnl 2.0.3 (including) 2.0.3 (including)
Slurm Llnl 2.0.4 (including) 2.0.4 (including)
Slurm Llnl 2.0.5 (including) 2.0.5 (including)
Slurm Llnl 2.0.6 (including) 2.0.6 (including)
Slurm Llnl 2.0.7 (including) 2.0.7 (including)
Slurm Llnl 2.0.8 (including) 2.0.8 (including)
Slurm Llnl 2.0.9 (including) 2.0.9 (including)
Slurm Llnl 2.1.0 (including) 2.1.0 (including)
Slurm Llnl 2.1.1 (including) 2.1.1 (including)
Slurm Llnl 2.1.2 (including) 2.1.2 (including)
Slurm Llnl 2.1.4 (including) 2.1.4 (including)
Slurm Llnl 2.1.5 (including) 2.1.5 (including)
Slurm Llnl 2.1.6 (including) 2.1.6 (including)
Slurm Llnl 2.1.7 (including) 2.1.7 (including)
Slurm Llnl 2.1.8 (including) 2.1.8 (including)
Slurm Llnl 2.1.9 (including) 2.1.9 (including)
Slurm Llnl 2.1.10 (including) 2.1.10 (including)
Slurm Llnl 2.1.11 (including) 2.1.11 (including)
Slurm Llnl 2.1.12 (including) 2.1.12 (including)
Slurm-llnl Ubuntu hardy *
Slurm-llnl Ubuntu jaunty *
Slurm-llnl Ubuntu karmic *
Slurm-llnl Ubuntu lucid *
Slurm-llnl Ubuntu maverick *
Slurm-llnl Ubuntu natty *
Slurm-llnl Ubuntu oneiric *
Slurm-llnl Ubuntu precise *
Slurm-llnl Ubuntu quantal *
Slurm-llnl Ubuntu raring *
Slurm-llnl Ubuntu saucy *
Slurm-llnl Ubuntu upstream *
Slurm-llnl Ubuntu utopic *
Slurm-llnl Ubuntu vivid *
Slurm-llnl Ubuntu wily *

References