Code injection

Simple Linux Utility for Resource Management SLURM 1.2 and 1.3 before 1.3.14 does not properly set supplementary groups before invoking 1 sbcast from the slurmd daemon or 2 strigger from the slurmctld daemon, which might allow local SLURM users to modify files and gain privileges...

CVE-2009-2084

Simple Linux Utility for Resource Management SLURM 1.2 and 1.3 before 1.3.14 does not properly set supplementary groups before invoking 1 sbcast from the slurmd daemon or 2 strigger from the slurmctld daemon, which might allow local SLURM users to modify files and gain privileges...

CVE-2009-2084

Simple Linux Utility for Resource Management SLURM 1.2 and 1.3 before 1.3.14 does not properly set supplementary groups before invoking 1 sbcast from the slurmd daemon or 2 strigger from the slurmctld daemon, which might allow local SLURM users to modify files and gain privileges...

CVE-2009-2084

Removed by vendor...

CVE-2009-2084

CVE-2009-2084 affects SLURM 1.2 and 1.3 prior to 1.3.14. The vulnerability stems from not properly setting supplementary groups before invoking sbcast (slurmd) or strigger (slurmctld), allowing local SLURM users to modify files and gain privileges. Connected sources corroborate a privilege escala...

Debian: Security Advisory (DSA-1776-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1776-1 (slurm-llnl)

The remote host is missing an update to slurm-llnl announced via advisory DSA 1776-1. OpenVAS Vulnerability Test $Id: deb17761.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1776-1 slurm-llnl Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian DSA-1776-1 : slurm-llnl - programming error

It was discovered that the Simple Linux Utility for Resource Management SLURM, a cluster job management and scheduling system, did not drop the supplemental groups. These groups may be system groups with elevated privileges, which may allow a valid SLURM user to gain elevated privileges...

[SECURITY] [DSA 1776-1] New slurm-llnl packages fix privilege escalation

------------------------------------------------------------------------ Debian Security Advisory DSA-1776-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 21, 2009 http://www.debian.org/security/faq -...

SLURM privilege escalation

Group privileges are not gropped on external program invocation...

[SECURITY] [DSA 1776-1] New slurm-llnl packages fix privilege escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1776-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 21, 2009 http://www.debian.org/security/faq -...

DSA-1776-1 slurm-llnl - privilege escalation

Bulletin has no description...

CVE-2009-0128

plugins/crypto/openssl/cryptoopenssl.c in Simple Linux Utility for Resource Management aka SLURM or slurm-llnl does not properly check the return value from the OpenSSL EVPVerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS...

CVE-2009-0128

plugins/crypto/openssl/cryptoopenssl.c in Simple Linux Utility for Resource Management aka SLURM or slurm-llnl does not properly check the return value from the OpenSSL EVPVerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS...

CVE-2009-0128

Technical details for CVE-2009-0128 are not publicly available in the provided documents. Monitor for updates.

CVE-2009-0128

Removed by vendor...

CVE-2009-0128

plugins/crypto/openssl/cryptoopenssl.c in Simple Linux Utility for Resource Management aka SLURM or slurm-llnl does not properly check the return value from the OpenSSL EVPVerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS...