Vulnerabilities > CVE-2010-3380 - Local Privilege Escalation vulnerability in SLURM 'slurm' and 'slurmdbd'

CVSS 6.9 - MEDIUM

Attack vector

LOCAL

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

COMPLETE

Integrity impact

COMPLETE

Availability impact

COMPLETE

local

llnl

NVD

Published: 2010-09-29

Updated: 2010-09-30

Summary

The (1) init.d/slurm and (2) init.d/slurmdbd scripts in SLURM before 2.1.14 place the . (dot) directory in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Vulnerable Configurations

Part	Description	Count
Application	Llnl Llnl Slurm 1.3.10 Llnl Slurm 1.3.11 Llnl Slurm 1.3.12 Llnl Slurm 1.3.13 Llnl Slurm 1.3.14 Llnl Slurm 1.3.15 Llnl Slurm 2.0.0 Llnl Slurm 2.0.1 Llnl Slurm 2.0.2 Llnl Slurm 2.0.3 Llnl Slurm 2.0.4 Llnl Slurm 2.0.5 Llnl Slurm 2.0.6 Llnl Slurm 2.0.7 Llnl Slurm 2.0.8 Llnl Slurm 2.0.9 Llnl Slurm 2.1.0 Llnl Slurm 2.1.1 Llnl Slurm 2.1.2 Llnl Slurm 2.1.4 Llnl Slurm 2.1.5 Llnl Slurm 2.1.6 Llnl Slurm 2.1.7 Llnl Slurm 2.1.8 Llnl Slurm 2.1.9 Llnl Slurm 2.1.10 Llnl Slurm 2.1.11 Llnl Slurm 2.1.12 Llnl Slurm *	29

Summary

Vulnerable Configurations

References