SLURM 'slurm' and 'slurmdbd' Multiple Local Privilege Escalation Vulnerabilities
BID:43537
Info
SLURM 'slurm' and 'slurmdbd' Multiple Local Privilege Escalation Vulnerabilities
| Bugtraq ID: | 43537 |
| Class: | Design Error |
| CVE: |
CVE-2010-3380 |
| Remote: | No |
| Local: | Yes |
| Published: | Sep 28 2010 12:00AM |
| Updated: | Sep 28 2010 12:00AM |
| Credit: | Raphael Geissert |
| Vulnerable: |
SLURM SLURM 2.1.13 |
| Not Vulnerable: |
SLURM SLURM 2.1.14 |
Discussion
SLURM 'slurm' and 'slurmdbd' Multiple Local Privilege Escalation Vulnerabilities
SLURM (Simple Linux Utility for Resource Management) is prone to multiple local privilege-escalation vulnerabilities.
Exploiting these issues allows local attackers to execute arbitrary code with the privileges of the user running the affected application.
Versions prior to SLURM 2.1.14 are vulnerable.
SLURM (Simple Linux Utility for Resource Management) is prone to multiple local privilege-escalation vulnerabilities.
Exploiting these issues allows local attackers to execute arbitrary code with the privileges of the user running the affected application.
Versions prior to SLURM 2.1.14 are vulnerable.
Exploit / POC
SLURM 'slurm' and 'slurmdbd' Multiple Local Privilege Escalation Vulnerabilities
An attacker may exploit this issue using commonly available tools.
An attacker may exploit this issue using commonly available tools.
Solution / Fix
SLURM 'slurm' and 'slurmdbd' Multiple Local Privilege Escalation Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
SLURM 'slurm' and 'slurmdbd' Multiple Local Privilege Escalation Vulnerabilities
References:
References:
- SLURM 2.1.14 Release Notes (SLURM)
- SLURM Homepage (SLURM)