13 matches found
CVE-2023-31443
CVE-2023-31443 nordugrid-arc-wn 6.14.0 DoS/LPE. Suggested description NorduGrid nordugrid-arc-wn 6.14.0 has the arc-job-cgroup SUID binary that is vulnerable to a path traversal attack. Combined with a race condition, the attacker can write the ppid to any file as long as the file is writable by...
[SECURITY] Fedora 45 Update: nordugrid-arc-7.2.0-2.fc45
NorduGrid is a collaboration aiming at development, maintenance and support of the middleware, known as the Advanced Resource Connector ARC. The ARC middleware is a software solution that uses distributed computing technologies to enable sharing and federation of computing resources across...
EUVD-2010-3370
Malware in sbrugna...
Exploit for CVE-2023-31443
CVE-2023-31443 nordugrid-arc-wn 6.14.0 DoS/LPE. Suggested...
SUSE CVE-2010-3372
Untrusted search path vulnerability in NorduGrid Advanced Resource Connector ARC before 0.8.3 allows local users to gain privileges via vectors related to the LDLIBRARYPATH environment variable. NOTE: some of these details are obtained from third party information...
nordugrid.org Cross Site Scripting vulnerability
Security Researcher Mughiwara Helped patch 190 vulnerabilities Received 2 Coordinated Disclosure badges Received 4 recommendations , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting nordugrid.org website and its users. Following coordinated...
CVE-2010-3372
Untrusted search path vulnerability in NorduGrid Advanced Resource Connector ARC before 0.8.3 allows local users to gain privileges via vectors related to the LDLIBRARYPATH environment variable. NOTE: some of these details are obtained from third party information...
CVE-2010-3372
Untrusted search path vulnerability in NorduGrid Advanced Resource Connector ARC before 0.8.3 allows local users to gain privileges via vectors related to the LDLIBRARYPATH environment variable. NOTE: some of these details are obtained from third party information...
Design/Logic Flaw
Untrusted search path vulnerability in NorduGrid Advanced Resource Connector ARC before 0.8.3 allows local users to gain privileges via vectors related to the LDLIBRARYPATH environment variable. NOTE: some of these details are obtained from third party information...
CVE-2010-3372
Untrusted search path vulnerability in NorduGrid Advanced Resource Connector ARC before 0.8.3 allows local users to gain privileges via vectors related to the LDLIBRARYPATH environment variable. NOTE: some of these details are obtained from third party information...
CVE-2010-3372
CVE-2010-3372 affects NorduGrid ARC prior to 0.8.3, where an untrusted search path via LD_LIBRARY_PATH allows local users to escalate privileges. Affected component: ARC’s runtime/library loading; root cause is improper handling of LD_LIBRARY_PATH. Impact per sources is privilege escalation on lo...
CVE-2010-3372: Undefined Security Weakness
Untrusted search path vulnerability in NorduGrid Advanced Resource Connector ARC before 0.8.3 allows local users to gain privileges via vectors related to the LDLIBRARYPATH environment variable. NOTE: some of these details are obtained from third party information...
PT-2010-4771
Name of the Vulnerable Software and Affected Versions NorduGrid Advanced Resource Connector ARC versions prior to 0.8.3 Description The issue is related to an untrusted search path vulnerability, allowing local users to gain privileges. This is achieved through vectors related to the LD LIBRARY...