Vulnerabilities > CVE-2006-2930 - Local Security vulnerability in Grid Engine

047910
CVSS 4.6 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
local
low complexity
sun
nessus
NVD
Published: 2006-06-09
Updated: 2017-07-20

Summary

Unspecified vulnerability in Sun Grid Engine 5.3 and Sun N1 Grid Engine 6.0, when configured in Certificate Security Protocol (CSP) Mode, allows local users to shut down the grid service or gain access, even if access is denied.

Vulnerable Configurations

Part Description Count
Application
Sun
2

Nessus

  • NASL familySolaris Local Security Checks
    NASL idSOLARIS10_X86_123039.NASL
    descriptionN1 Grid Engine 6.0_x86: maintenance patch. Date this patch was last updated by Sun : May/04/06 This plugin has been deprecated and either replaced with individual 123039 patch-revision plugins, or deemed non-security related.
    last seen2019-02-21
    modified2018-07-30
    plugin id23002
    published2006-11-06
    reporterTenable
    sourcehttps://www.tenable.com/plugins/index.php?view=single&id=23002
    titleSolaris 10 (x86) : 123039-01 (deprecated)
    code
    #%NASL_MIN_LEVEL 80502

#
# (C) Tenable Network Security, Inc.
#
# @DEPRECATED@
#
# Disabled on 2018/03/12. Deprecated and either replaced by
# individual patch-revision plugins, or has been deemed a
# non-security advisory.
#
include("compat.inc");

if (description)
{
  script_id(23002);
  script_version("1.27");
  script_cvs_date("Date: 2019/10/25 13:36:23");

  script_cve_id("CVE-2006-2930", "CVE-2006-3941");

  script_name(english:"Solaris 10 (x86) : 123039-01 (deprecated)");
  script_summary(english:"Check for patch 123039-01");

  script_set_attribute(
    attribute:"synopsis", 
    value:"This plugin has been deprecated."
  );
  script_set_attribute(
    attribute:"description",
    value:
"N1 Grid Engine 6.0_x86: maintenance patch.
Date this patch was last updated by Sun : May/04/06

This plugin has been deprecated and either replaced with individual
123039 patch-revision plugins, or deemed non-security related."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://getupdates.oracle.com/readme/123039-01"
  );
  script_set_attribute(
    attribute:"solution", 
    value:"n/a"
  );
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:sun:solaris");

  script_set_attribute(attribute:"patch_publication_date", value:"2006/05/04");
  script_set_attribute(attribute:"plugin_publication_date", value:"2006/11/06");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2006-2019 Tenable Network Security, Inc.");
  script_family(english:"Solaris Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/Solaris/showrev");

  exit(0);
}

exit(0, "This plugin has been deprecated. Consult specific patch-revision plugins for patch 123039 instead.");
  • NASL familySolaris Local Security Checks
    NASL idSOLARIS8_X86_123039.NASL
    descriptionN1 Grid Engine 6.0_x86: maintenance patch. Date this patch was last updated by Sun : May/04/06
    last seen2020-06-01
    modified2020-06-02
    plugin id23470
    published2006-11-06
    reporterThis script is Copyright (C) 2006-2019 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/23470
    titleSolaris 8 (x86) : 123039-01
    code
    #%NASL_MIN_LEVEL 80502
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text in this plugin was
# extracted from the Oracle SunOS Patch Updates.
#
include("compat.inc");

if (description)
{
  script_id(23470);
  script_version("1.25");
  script_cvs_date("Date: 2019/10/25 13:36:23");

  script_cve_id("CVE-2006-2930", "CVE-2006-3941");

  script_name(english:"Solaris 8 (x86) : 123039-01");
  script_summary(english:"Check for patch 123039-01");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote host is missing Sun Security Patch number 123039-01"
  );
  script_set_attribute(
    attribute:"description", 
    value:
"N1 Grid Engine 6.0_x86: maintenance patch.
Date this patch was last updated by Sun : May/04/06"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://getupdates.oracle.com/readme/123039-01"
  );
  script_set_attribute(
    attribute:"solution", 
    value:"You should install this patch for your system to be up-to-date."
  );
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:sun:solaris");

  script_set_attribute(attribute:"patch_publication_date", value:"2006/05/04");
  script_set_attribute(attribute:"plugin_publication_date", value:"2006/11/06");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2006-2019 Tenable Network Security, Inc.");
  script_family(english:"Solaris Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/Solaris/showrev");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("solaris.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);

if (solaris_check_patch(release:"5.8_x86", arch:"i386", patch:"123039-01", obsoleted_by:"124521-01 ", package:"SUNWsgeei", version:"6.0,REV=2004.06.03.16.00") < 0) flag++;

if (flag)
{
  if (report_verbosity > 0) security_hole(port:0, extra:solaris_get_report());
  else security_hole(0);
  exit(0);
}
audit(AUDIT_HOST_NOT, "affected");
  • NASL familySolaris Local Security Checks
    NASL idSOLARIS10_X86_123040.NASL
    descriptionN1 Grid Engine 6.0_x86: maintenance patch. Date this patch was last updated by Sun : May/04/06 This plugin has been deprecated and either replaced with individual 123040 patch-revision plugins, or deemed non-security related.
    last seen2019-02-21
    modified2018-07-30
    plugin id23003
    published2006-11-06
    reporterTenable
    sourcehttps://www.tenable.com/plugins/index.php?view=single&id=23003
    titleSolaris 10 (x86) : 123040-01 (deprecated)
    code
    #%NASL_MIN_LEVEL 80502

#
# (C) Tenable Network Security, Inc.
#
# @DEPRECATED@
#
# Disabled on 2018/03/12. Deprecated and either replaced by
# individual patch-revision plugins, or has been deemed a
# non-security advisory.
#
include("compat.inc");

if (description)
{
  script_id(23003);
  script_version("1.27");
  script_cvs_date("Date: 2019/10/25 13:36:23");

  script_cve_id("CVE-2006-2930", "CVE-2006-3941");

  script_name(english:"Solaris 10 (x86) : 123040-01 (deprecated)");
  script_summary(english:"Check for patch 123040-01");

  script_set_attribute(
    attribute:"synopsis", 
    value:"This plugin has been deprecated."
  );
  script_set_attribute(
    attribute:"description",
    value:
"N1 Grid Engine 6.0_x86: maintenance patch.
Date this patch was last updated by Sun : May/04/06

This plugin has been deprecated and either replaced with individual
123040 patch-revision plugins, or deemed non-security related."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://getupdates.oracle.com/readme/123040-01"
  );
  script_set_attribute(
    attribute:"solution", 
    value:"n/a"
  );
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:sun:solaris");

  script_set_attribute(attribute:"patch_publication_date", value:"2006/05/04");
  script_set_attribute(attribute:"plugin_publication_date", value:"2006/11/06");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2006-2019 Tenable Network Security, Inc.");
  script_family(english:"Solaris Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/Solaris/showrev");

  exit(0);
}

exit(0, "This plugin has been deprecated. Consult specific patch-revision plugins for patch 123040 instead.");
  • NASL familySolaris Local Security Checks
    NASL idSOLARIS7_123038.NASL
    descriptionN1 Grid Engine 6.0: maintenance patch. Date this patch was last updated by Sun : May/04/06
    last seen2020-06-01
    modified2020-06-02
    plugin id23269
    published2006-11-06
    reporterThis script is Copyright (C) 2006-2019 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/23269
    titleSolaris 7 (sparc) : 123038-01
    code
    #%NASL_MIN_LEVEL 80502
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text in this plugin was
# extracted from the Oracle SunOS Patch Updates.
#
include("compat.inc");

if (description)
{
  script_id(23269);
  script_version("1.25");
  script_cvs_date("Date: 2019/10/25 13:36:23");

  script_cve_id("CVE-2006-2930", "CVE-2006-3941");

  script_name(english:"Solaris 7 (sparc) : 123038-01");
  script_summary(english:"Check for patch 123038-01");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote host is missing Sun Security Patch number 123038-01"
  );
  script_set_attribute(
    attribute:"description", 
    value:
"N1 Grid Engine 6.0: maintenance patch.
Date this patch was last updated by Sun : May/04/06"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://getupdates.oracle.com/readme/123038-01"
  );
  script_set_attribute(
    attribute:"solution", 
    value:"You should install this patch for your system to be up-to-date."
  );
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:sun:solaris");

  script_set_attribute(attribute:"patch_publication_date", value:"2006/05/04");
  script_set_attribute(attribute:"plugin_publication_date", value:"2006/11/06");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2006-2019 Tenable Network Security, Inc.");
  script_family(english:"Solaris Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/Solaris/showrev");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("solaris.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);

if (solaris_check_patch(release:"5.7", arch:"sparc", patch:"123038-01", obsoleted_by:"124520-01 ", package:"SUNWsgeex", version:"6.0,REV=2004.06.03.16.00") < 0) flag++;

if (flag)
{
  if (report_verbosity > 0) security_hole(port:0, extra:solaris_get_report());
  else security_hole(0);
  exit(0);
}
audit(AUDIT_HOST_NOT, "affected");
  • NASL familySolaris Local Security Checks
    NASL idSOLARIS7_123037.NASL
    descriptionN1 Grid Engine 6.0: maintenance patch. Date this patch was last updated by Sun : May/04/06
    last seen2020-06-01
    modified2020-06-02
    plugin id23268
    published2006-11-06
    reporterThis script is Copyright (C) 2006-2019 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/23268
    titleSolaris 7 (sparc) : 123037-01
    code
    #%NASL_MIN_LEVEL 80502
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text in this plugin was
# extracted from the Oracle SunOS Patch Updates.
#
include("compat.inc");

if (description)
{
  script_id(23268);
  script_version("1.25");
  script_cvs_date("Date: 2019/10/25 13:36:23");

  script_cve_id("CVE-2006-2930", "CVE-2006-3941");

  script_name(english:"Solaris 7 (sparc) : 123037-01");
  script_summary(english:"Check for patch 123037-01");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote host is missing Sun Security Patch number 123037-01"
  );
  script_set_attribute(
    attribute:"description", 
    value:
"N1 Grid Engine 6.0: maintenance patch.
Date this patch was last updated by Sun : May/04/06"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://getupdates.oracle.com/readme/123037-01"
  );
  script_set_attribute(
    attribute:"solution", 
    value:"You should install this patch for your system to be up-to-date."
  );
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:sun:solaris");

  script_set_attribute(attribute:"patch_publication_date", value:"2006/05/04");
  script_set_attribute(attribute:"plugin_publication_date", value:"2006/11/06");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2006-2019 Tenable Network Security, Inc.");
  script_family(english:"Solaris Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/Solaris/showrev");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("solaris.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);

if (solaris_check_patch(release:"5.7", arch:"sparc", patch:"123037-01", obsoleted_by:"124519-01 ", package:"SUNWsgee", version:"6.0,REV=2004.06.03.16.00") < 0) flag++;

if (flag)
{
  if (report_verbosity > 0) security_hole(port:0, extra:solaris_get_report());
  else security_hole(0);
  exit(0);
}
audit(AUDIT_HOST_NOT, "affected");
  • NASL familySolaris Local Security Checks
    NASL idSOLARIS9_123037.NASL
    descriptionN1 Grid Engine 6.0: maintenance patch. Date this patch was last updated by Sun : May/04/06
    last seen2020-06-01
    modified2020-06-02
    plugin id23567
    published2006-11-06
    reporterThis script is Copyright (C) 2006-2019 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/23567
    titleSolaris 9 (sparc) : 123037-01
    code
    #%NASL_MIN_LEVEL 80502
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text in this plugin was
# extracted from the Oracle SunOS Patch Updates.
#
include("compat.inc");

if (description)
{
  script_id(23567);
  script_version("1.24");
  script_cvs_date("Date: 2019/10/25 13:36:23");

  script_cve_id("CVE-2006-2930", "CVE-2006-3941");

  script_name(english:"Solaris 9 (sparc) : 123037-01");
  script_summary(english:"Check for patch 123037-01");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote host is missing Sun Security Patch number 123037-01"
  );
  script_set_attribute(
    attribute:"description", 
    value:
"N1 Grid Engine 6.0: maintenance patch.
Date this patch was last updated by Sun : May/04/06"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://getupdates.oracle.com/readme/123037-01"
  );
  script_set_attribute(
    attribute:"solution", 
    value:"You should install this patch for your system to be up-to-date."
  );
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:sun:solaris");

  script_set_attribute(attribute:"patch_publication_date", value:"2006/05/04");
  script_set_attribute(attribute:"plugin_publication_date", value:"2006/11/06");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2006-2019 Tenable Network Security, Inc.");
  script_family(english:"Solaris Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/Solaris/showrev");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("solaris.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);

if (solaris_check_patch(release:"5.9", arch:"sparc", patch:"123037-01", obsoleted_by:"124519-01 ", package:"SUNWsgee", version:"6.0,REV=2004.06.03.16.00") < 0) flag++;

if (flag)
{
  if (report_verbosity > 0) security_hole(port:0, extra:solaris_get_report());
  else security_hole(0);
  exit(0);
}
audit(AUDIT_HOST_NOT, "affected");
  • NASL familySolaris Local Security Checks
    NASL idSOLARIS8_123038.NASL
    descriptionN1 Grid Engine 6.0: maintenance patch. Date this patch was last updated by Sun : May/04/06
    last seen2020-06-01
    modified2020-06-02
    plugin id23428
    published2006-11-06
    reporterThis script is Copyright (C) 2006-2019 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/23428
    titleSolaris 8 (sparc) : 123038-01
  • NASL familySolaris Local Security Checks
    NASL idSOLARIS10_123038.NASL
    descriptionN1 Grid Engine 6.0: maintenance patch. Date this patch was last updated by Sun : May/04/06 This plugin has been deprecated and either replaced with individual 123038 patch-revision plugins, or deemed non-security related.
    last seen2019-02-21
    modified2018-07-30
    plugin id22974
    published2006-11-06
    reporterTenable
    sourcehttps://www.tenable.com/plugins/index.php?view=single&id=22974
    titleSolaris 10 (sparc) : 123038-01 (deprecated)
  • NASL familySolaris Local Security Checks
    NASL idSOLARIS10_123037.NASL
    descriptionN1 Grid Engine 6.0: maintenance patch. Date this patch was last updated by Sun : May/04/06 This plugin has been deprecated and either replaced with individual 123037 patch-revision plugins, or deemed non-security related.
    last seen2019-02-21
    modified2018-07-30
    plugin id22973
    published2006-11-06
    reporterTenable
    sourcehttps://www.tenable.com/plugins/index.php?view=single&id=22973
    titleSolaris 10 (sparc) : 123037-01 (deprecated)
  • NASL familySolaris Local Security Checks
    NASL idSOLARIS9_123038.NASL
    descriptionN1 Grid Engine 6.0: maintenance patch. Date this patch was last updated by Sun : May/04/06
    last seen2020-06-01
    modified2020-06-02
    plugin id23568
    published2006-11-06
    reporterThis script is Copyright (C) 2006-2019 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/23568
    titleSolaris 9 (sparc) : 123038-01
  • NASL familySolaris Local Security Checks
    NASL idSOLARIS8_123037.NASL
    descriptionN1 Grid Engine 6.0: maintenance patch. Date this patch was last updated by Sun : May/04/06
    last seen2020-06-01
    modified2020-06-02
    plugin id23427
    published2006-11-06
    reporterThis script is Copyright (C) 2006-2019 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/23427
    titleSolaris 8 (sparc) : 123037-01
  • NASL familySolaris Local Security Checks
    NASL idSOLARIS9_X86_123039.NASL
    descriptionN1 Grid Engine 6.0_x86: maintenance patch. Date this patch was last updated by Sun : May/04/06
    last seen2020-06-01
    modified2020-06-02
    plugin id23623
    published2006-11-06
    reporterThis script is Copyright (C) 2006-2019 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/23623
    titleSolaris 9 (x86) : 123039-01

References