Lucene search
HistoryNov 23, 2004 - 5:00 a.m.
CVE-2004-0318
lsf
load sharing facility
cve-2004-0318
vulnerability
remote attackers
privileges
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.2 High
AI Score
Confidence
Low
0.034 Low
EPSS
Percentile
91.5%
Load Sharing Facility (LSF) 4.x, 5.x, and 6.x uses the LSF_EAUTH_UID environment variable, if it exists, instead of the real UID of the user, which could allow remote attackers within the local cluster to gain privileges.
Affected configurations
Node
platformlsfMatch4.0
ORplatformlsfMatch4.2
ORplatformlsfMatch5.0
ORplatformlsfMatch5.1
ORplatformlsfMatch6.0
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.2 High
AI Score
Confidence
Low
0.034 Low
EPSS
Percentile
91.5%
Related for CVE-2004-0318