Sun Solaris N1 Grid Engine Multiple Local Vulnerabilities
BID:19218
CVE-2006-3941 |Info
Sun Solaris N1 Grid Engine Multiple Local Vulnerabilities
| Bugtraq ID: | 19218 |
| Class: | Unknown |
| CVE: |
CVE-2006-3941 |
| Remote: | No |
| Local: | Yes |
| Published: | Jul 28 2006 12:00AM |
| Updated: | Jun 27 2007 05:48PM |
| Credit: | The vendor reported these vulnerabilities. |
| Vulnerable: |
Sun Grid Engine 5.3 x86 Sun Grid Engine 5.3 Sun Linux Sun Grid Engine 5.3 64-bit SPARC Sun Grid Engine 5.3 32-bit SPARC Sun Grid Engine 6.0 Avaya Interactive Response Avaya Call Management System 0 |
| Not Vulnerable: | |
Discussion
Sun Solaris N1 Grid Engine Multiple Local Vulnerabilities
N1 Grid Engine is prone to a multiple local vulnerabilities.
An unprivileged local attacker may be able to trigger the following vulnerabilities:
- A denial-of-service condition by shutting down the grid service.
- An unspecified buffer-overflow vulnerability.
Successful exploits of these vulnerabilities may allow local attackers to execute arbitrary machine code resulting in privilege escalation or to deny service to legitimate users.
N1 Grid Engine is prone to a multiple local vulnerabilities.
An unprivileged local attacker may be able to trigger the following vulnerabilities:
- A denial-of-service condition by shutting down the grid service.
- An unspecified buffer-overflow vulnerability.
Successful exploits of these vulnerabilities may allow local attackers to execute arbitrary machine code resulting in privilege escalation or to deny service to legitimate users.
Exploit / POC
Sun Solaris N1 Grid Engine Multiple Local Vulnerabilities
Currently we are not aware of any exploits for the buffer overflow issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
The denial-of-service issue will likely not require exploit code.
Currently we are not aware of any exploits for the buffer overflow issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
The denial-of-service issue will likely not require exploit code.
Solution / Fix
Sun Solaris N1 Grid Engine Multiple Local Vulnerabilities
Solution:
Sun has released patches to address this issue. Please see the references for more information.
Solution:
Sun has released patches to address this issue. Please see the references for more information.
References
Sun Solaris N1 Grid Engine Multiple Local Vulnerabilities
References:
References:
- Sun Alert ID: 102322 (Sun Microsystems)
- ASA-2006-204 - Sun Alert Notifications from Sun Weekly Report dated Jul 29, 2006 (Avaya)