7.2

CVE-2009-2084

Simple Linux Utility for Resource Management (SLURM) 1.2 and 1.3 before 1.3.14 does not properly set supplementary groups before invoking (1) sbcast from the slurmd daemon or (2) strigger from the slurmctld daemon, which might allow local SLURM users to modify files and gain privileges.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Llnl ≫ Slurm Version <= 1.3.13
Llnl ≫ Slurm Version1.2
Llnl ≫ Slurm Version1.3
Llnl ≫ Slurm Version1.3.1
Llnl ≫ Slurm Version1.3.2
Llnl ≫ Slurm Version1.3.3
Llnl ≫ Slurm Version1.3.4
Llnl ≫ Slurm Version1.3.5
Llnl ≫ Slurm Version1.3.6
Llnl ≫ Slurm Version1.3.7
Llnl ≫ Slurm Version1.3.8
Llnl ≫ Slurm Version1.3.9
Llnl ≫ Slurm Version1.3.10
Llnl ≫ Slurm Version1.3.11
Llnl ≫ Slurm Version1.3.12
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.38% 0.292
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=524980
http://secunia.com/advisories/34831
Vendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=676055&group_id=157944
http://www.debian.org/security/2009/dsa-1776
Patch
http://www.securityfocus.com/bid/34638
Patch
http://www.vupen.com/english/advisories/2009/1128
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/50126
https://exchange.xforce.ibmcloud.com/vulnerabilities/50127