CVE-2014-0748

apinit on Cray devices with CLE before 4.2.UP02 and 5.x before 5.1.UP00 does not use alpsauth data to validate the UID in a launch message, which allows local users to gain privileges via a modified aprun program, aka ID FN5912...

CVE-2014-0748

apinit on Cray devices with CLE before 4.2.UP02 and 5.x before 5.1.UP00 does not use alpsauth data to validate the UID in a launch message, which allows local users to gain privileges via a modified aprun program, aka ID FN5912...

CVE-2014-0748

CVE-2014-0748 affects Cray Aprun/Apinit on Cray supercomputers. The issue arises from the apinit service not validating the UID in launch messages received via aprun against the ALPS-authenticated UID, allowing a local user to escalate privileges to root on a compute node. Affected versions were ...

Cray UNICOS /etc/nu -c Option Filename Processing Local Overflow

No description provided by source. source: http://www.securityfocus.com/bid/16205/info Cray UNICOS is prone to locally exploitable buffer overflow vulnerabilities. These issues are due to insufficient bounds checking of command line parameters in various utilities with setuid-superuser privileges...

Cray UNICOS /usr/bin/script Command Line Argument Local Overflow

No description provided by source. source: http://www.securityfocus.com/bid/16205/info Cray UNICOS is prone to locally exploitable buffer overflow vulnerabilities. These issues are due to insufficient bounds checking of command line parameters in various utilities with setuid-superuser privileges...

Cray supercomputers privilege escalation

root privileges escalation via aprun/apinit...

[mwrlabs advisory][CVE-2014-0748] Cray Aprun/Apinit Privilege Escalation

Cray Aprun/Apinit Privilege Escalation ====================================== MWR have identified a vulnerability which allows users to escalate their privileges to root on Cray supercomputers. This advisory details the vulnerability and the patches which Cray customers can apply in order to...

Cray Aprun / Apinit Privilege Escalation

Cray Aprun/Apinit Privilege Escalation ====================================== MWR have identified a vulnerability which allows users to escalate their privileges to root on Cray supercomputers. This advisory details the vulnerability and the patches which Cray customers can apply in order to...

NSD vulnerable to one-byte overflow

Overview A vulnerability exists in the way NSD processes certain types of packets that may lead to a one-byte buffer overflow. Description Name server daemon NSD is an open source name server developed by NLnet Labs. NSD contains an off-by-one error that can cause a one-byte buffer overflow when...

ntpd autokey stack buffer overflow

Overview ntpd contains a stack buffer overflow, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system or create a denial of service. Description NTP Network Time Protocol is a method by which client machines can synchronize the local date and time wit...

Unfixed XSS vulnerability at www.cray-cyber.org

Security researcher PaPPy, has submitted on 24/04/2008 a cross-site-scripting XSS vulnerability affecting www.cray-cyber.org, which at the time of submission ranked 2329680 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/04/2008. It is...

Shadow Utils useradd utility sets incorrect file permissions

Overview The Shadow Utilities contain a vulnerability that may result in new user mailboxes having arbitrary permissions. Description The Shadow Utilities provide tools to manage user accounts.When a new mailbox is created using the useradd utility, the open function does not receive the expected...

Samba NDR MS-RPC heap buffer overflow

Overview Samba fails to properly handle malformed MS-RPC packets. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary code. Description Samba is a widely used open-source implementation of Server Message Block SMB/Common Internet File System CIFS. Network Data...

Buffer overflow

Multiple buffer overflows in Cray UNICOS 9.0.2.2 might allow local users to gain privileges by 1 invoking /usr/bin/script with a long command line argument or 2 setting the -c option of /etc/nu to the name of a file containing a long line...

CVE-2006-0177

Multiple buffer overflows in Cray UNICOS 9.0.2.2 might allow local users to gain privileges by 1 invoking /usr/bin/script with a long command line argument or 2 setting the -c option of /etc/nu to the name of a file containing a long line...

CVE-2006-0177

Multiple buffer overflows in Cray UNICOS 9.0.2.2 might allow local users to gain privileges by 1 invoking /usr/bin/script with a long command line argument or 2 setting the -c option of /etc/nu to the name of a file containing a long line...

CVE-2006-0177

CVE-2006-0177 involves multiple buffer overflows in Cray UNICOS 9.0.2.2 that could allow local users to gain privileges. The two triggers described are: (1) invoking /usr/bin/script with a long command line argument, and (2) setting the -c option of /etc/nu to a filename containing a long line. T...

Cray UNICOS /etc/nu - '-c' Option Filename Processing Local Overflow

source: https://www.securityfocus.com/bid/16205/info Cray UNICOS is prone to locally exploitable buffer overflow vulnerabilities. These issues are due to insufficient bounds checking of command line parameters in various utilities with setuid-superuser privileges. Successful exploitation could...

Cray UNICOS etcnu - -c Option Filename Processing Local Overflow

Cray UNICOS etcnu - -c Option Filename Processing Local Overflow source: https://www.securityfocus.com/bid/16205/info Cray UNICOS is prone to locally exploitable buffer overflow vulnerabilities. These issues are due to insufficient bounds checking of command line parameters in various utilities...

Cray UNICOS usrbinscript - Command Line Argument Local Overflow

Cray UNICOS usrbinscript - Command Line Argument Local Overflow source: https://www.securityfocus.com/bid/16205/info Cray UNICOS is prone to locally exploitable buffer overflow vulnerabilities. These issues are due to insufficient bounds checking of command line parameters in various utilities wi...