Directory traversal

2010-09-2917:00:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

The (1) init.d/slurm and (2) init.d/slurmdbd scripts in SLURM before 2.1.14 place the . (dot) directory in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

CPENameOperatorVersion
slurmeq2.0.9
slurmeq2.0.3
slurmeq1.3.15
slurmeq2.1.11
slurmeq2.0.5
slurmeq2.1.1
slurmeq2.0.8
slurmeq2.1.9
slurmle2.1.13
slurmeq1.3.12