[SECURITY] Fedora 45 Update: nordugrid-arc-7.2.0-2.fc45

NorduGrid is a collaboration aiming at development, maintenance and support of the middleware, known as the Advanced Resource Connector ARC. The ARC middleware is a software solution that uses distributed computing technologies to enable sharing and federation of computing resources across...

CVE-2023-31443

CVE-2023-31443 nordugrid-arc-wn 6.14.0 DoS/LPE. 권장 설명 NorduGrid nordugrid-arc-wn 6.14.0에는 경로 탐색 공격에 취약한 arc-job-cgroup SUID 바이너리가 있습니다. 경쟁 조건과 결합하면 공격자는 루트 사용자가 쓸 수 있는 모든 파일에 ppid를 쓸 수 있습니다. 취약점 유형 디렉터리 탐색 제품 공급업체 NorduGrid 영향을 받는 제품 코드 베이스 nordugrid-arc-wn - 6.14.0 영향을 받는 구성 요소 영향을 받는 실행 파일:...

EUVD-2010-3370

Malware in sbrugna...

Exploit for CVE-2023-31443

CVE-2023-31443 nordugrid-arc-wn 6.14.0 DoS/LPE. Suggested...

SUSE CVE-2010-3372

Untrusted search path vulnerability in NorduGrid Advanced Resource Connector ARC before 0.8.3 allows local users to gain privileges via vectors related to the LDLIBRARYPATH environment variable. NOTE: some of these details are obtained from third party information...

nordugrid.org Cross Site Scripting vulnerability

Security Researcher Mughiwara Helped patch 190 vulnerabilities Received 2 Coordinated Disclosure badges Received 4 recommendations , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting nordugrid.org website and its users. Following coordinated...

CVE-2010-3372

Untrusted search path vulnerability in NorduGrid Advanced Resource Connector ARC before 0.8.3 allows local users to gain privileges via vectors related to the LDLIBRARYPATH environment variable. NOTE: some of these details are obtained from third party information...

Design/Logic Flaw

Untrusted search path vulnerability in NorduGrid Advanced Resource Connector ARC before 0.8.3 allows local users to gain privileges via vectors related to the LDLIBRARYPATH environment variable. NOTE: some of these details are obtained from third party information...

CVE-2010-3372

Untrusted search path vulnerability in NorduGrid Advanced Resource Connector ARC before 0.8.3 allows local users to gain privileges via vectors related to the LDLIBRARYPATH environment variable. NOTE: some of these details are obtained from third party information...

CVE-2010-3372

CVE-2010-3372 affects NorduGrid ARC prior to 0.8.3, where an untrusted search path via LD_LIBRARY_PATH allows local users to escalate privileges. Affected component: ARC’s runtime/library loading; root cause is improper handling of LD_LIBRARY_PATH. Impact per sources is privilege escalation on lo...

CVE-2010-3372

Untrusted search path vulnerability in NorduGrid Advanced Resource Connector ARC before 0.8.3 allows local users to gain privileges via vectors related to the LDLIBRARYPATH environment variable. NOTE: some of these details are obtained from third party information...

CVE-2010-3372: Undefined Security Weakness

Untrusted search path vulnerability in NorduGrid Advanced Resource Connector ARC before 0.8.3 allows local users to gain privileges via vectors related to the LDLIBRARYPATH environment variable. NOTE: some of these details are obtained from third party information...