NVD

Id
49346  
Name
CVE-2009-2084  
Description
Simple Linux Utility for Resource Management (SLURM) 1.2 and 1.3 before 1.3.14 does not properly set supplementary groups before invoking (1) sbcast from the slurmd daemon or (2) strigger from the slurmctld daemon, which might allow local SLURM users to modify files and gain privileges.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-06-16  
Modified Date
2009-06-18  
Seq
2009-2084  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
249800 49346 CVE-2009-2084 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=524980  View
249801 49346 CVE-2009-2084 http://sourceforge.net/project/shownotes.php?release_id=676055&group_id=157944  View
249802 49346 CVE-2009-2084 DSA-1776  View
249803 49346 CVE-2009-2084 34638  View
249804 49346 CVE-2009-2084 ADV-2009-1128  View
249805 49346 CVE-2009-2084 slurm-sbcast-priv-escalation(50126)  View
249806 49346 CVE-2009-2084 slurm-slurmctld-privilege-escalation(50127)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
43733 JVNDB-2009-004740 SLURM における権限を取得される脆弱性 Simple Linux Utility for Resource Management (SLURM) は、(1) slurmd デーモンから sbcast を呼び出す、または (2) slurmctld デーモンから strigger を呼び出す前に補助グループを適切に設定しないため、ファイルを変更されるおよび権限を取得される脆弱性が存在します。 CVE-2009-2084 39515 CVE-2009-2084 49346 7.2 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004740.html 2009-06-16 2012-09-25 View