Debian DSA-2472-1 : gridengine - privilege escalation

Dave Love discovered that users who are allowed to submit jobs to a Grid Engine installation can escalate their privileges to root because the environment is not properly sanitized before creating processes. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

[SECURITY] [DSA 2472-1] gridengine security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2472-1 [email protected] http://www.debian.org/security/ Florian Weimer May 15, 2012 http://www.debian.org/security/faq -...

CVE-2012-0208

CVE-2012-0208 affects Oracle Grid Engine (Sun/Open Grid Engine) 6.1/6.2. The root cause is that the execution environment is not sanitized before creating processes, enabling remote authenticated users to escalate privileges (to root per Debian advisory). Remediation in vendor/debian disclosures ...