Vulnerabilities > CVE-2010-3380 - Unspecified vulnerability in Llnl Slurm

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

llnl

NVD

Published: 2010-09-29

Updated: 2024-11-21

Summary

The (1) init.d/slurm and (2) init.d/slurmdbd scripts in SLURM before 2.1.14 place the . (dot) directory in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Vulnerable Configurations

Part	Description	Count
Application	Llnl Llnl Slurm 2.0.9 Llnl Slurm 2.0.3 Llnl Slurm 1.3.15 Llnl Slurm 2.1.11 Llnl Slurm 2.0.5 Llnl Slurm 2.1.1 Llnl Slurm 2.0.8 Llnl Slurm 2.1.9 Llnl Slurm * Llnl Slurm 1.3.12 Llnl Slurm 2.1.6 Llnl Slurm 2.0.0 Llnl Slurm 2.0.6 Llnl Slurm 1.3.10 Llnl Slurm 2.1.4 Llnl Slurm 2.1.8 Llnl Slurm 2.1.2 Llnl Slurm 2.0.4 Llnl Slurm 2.1.5 Llnl Slurm 1.3.14 Llnl Slurm 2.1.10 Llnl Slurm 1.3.11 Llnl Slurm 2.0.2 Llnl Slurm 2.1.0 Llnl Slurm 2.0.7 Llnl Slurm 2.1.12 Llnl Slurm 1.3.13 Llnl Slurm 2.0.1 Llnl Slurm 2.1.7	29

Summary

Vulnerable Configurations

References