EUVD-2014-0779

Malware in sbrugna...

CVE-2014-0748

apinit on Cray devices with CLE before 4.2.UP02 and 5.x before 5.1.UP00 does not use alpsauth data to validate the UID in a launch message, which allows local users to gain privileges via a modified aprun program, aka ID FN5912...

PT-2014-3811

Name of the Vulnerable Software and Affected Versions apinit on Cray devices with CLE version 4.2 before 4.2.UP02 apinit on Cray devices with CLE version 5.x before 5.1.UP00 Description The issue concerns the apinit on Cray devices, where it does not properly validate the UID in a launch message...

CVE-2014-0748: Improper Input Validation

apinit on Cray devices with CLE before 4.2.UP02 and 5.x before 5.1.UP00 does not use alpsauth data to validate the UID in a launch message, which allows local users to gain privileges via a modified aprun program, aka ID FN5912...

Cray supercomputers privilege escalation

root privileges escalation via aprun/apinit...

[mwrlabs advisory][CVE-2014-0748] Cray Aprun/Apinit Privilege Escalation

Cray Aprun/Apinit Privilege Escalation ====================================== MWR have identified a vulnerability which allows users to escalate their privileges to root on Cray supercomputers. This advisory details the vulnerability and the patches which Cray customers can apply in order to...