DQS dsh Buffer Overflow Vulnerability
BID:2749
Info
DQS dsh Buffer Overflow Vulnerability
| Bugtraq ID: | 2749 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | May 19 2001 12:00AM |
| Updated: | May 19 2001 12:00AM |
| Credit: | Reportedly discovered by Drake Diedrich <[email protected]> and reported to Bugtraq by dex dex <[email protected]> on May 19, 2001. |
| Vulnerable: |
FSU DQS 3.2.7 |
| Not Vulnerable: | |
Discussion
DQS dsh Buffer Overflow Vulnerability
The Distributed Queueing System (DQS) is a management tool to aid in computational resource distribution across a network. It is designed to support sending serial and parallel jobs to a cluster of workstations.
A buffer overflow error exists in the 'dsh' utility program included with DQS. Because the program is installed setuid root by some packages, it may be possible for a local attacker to execute arbitrary code/commands with elevated privileges.
The Distributed Queueing System (DQS) is a management tool to aid in computational resource distribution across a network. It is designed to support sending serial and parallel jobs to a cluster of workstations.
A buffer overflow error exists in the 'dsh' utility program included with DQS. Because the program is installed setuid root by some packages, it may be possible for a local attacker to execute arbitrary code/commands with elevated privileges.
Solution / Fix
DQS dsh Buffer Overflow Vulnerability
Solution:
It has been suggested that removing the suid root bit from the program will effectively prevent local attackers from exploiting this vulnerability.
Solution:
It has been suggested that removing the suid root bit from the program will effectively prevent local attackers from exploiting this vulnerability.
References
DQS dsh Buffer Overflow Vulnerability
References:
References: