SLURM Prolog Security Bypass Vulnerability

Slurm is an open source and highly scalable cluster management and job scheduling system for large and small Linux clusters. A security bypass vulnerability exists in Slurm. An attacker can exploit this vulnerability to perform unauthorized operations bypassing security restrictions...

CVE-2016-10030

The prologerror function in slurmd/req.c in Slurm before 15.08.13, 16.x before 16.05.7, and 17.x before 17.02.0-pre4 has a vulnerability in how the slurmd daemon informs users of a Prolog failure on a compute node. That vulnerability could allow a user to assume control of an arbitrary file on th...

CVE-2016-10030

The prologerror function in slurmd/req.c in Slurm before 15.08.13, 16.x before 16.05.7, and 17.x before 17.02.0-pre4 has a vulnerability in how the slurmd daemon informs users of a Prolog failure on a compute node. That vulnerability could allow a user to assume control of an arbitrary file on th...

CVE-2016-10030

The prologerror function in slurmd/req.c in Slurm before 15.08.13, 16.x before 16.05.7, and 17.x before 17.02.0-pre4 has a vulnerability in how the slurmd daemon informs users of a Prolog failure on a compute node. That vulnerability could allow a user to assume control of an arbitrary file on th...

UBUNTU-CVE-2016-10030

The prologerror function in slurmd/req.c in Slurm before 15.08.13, 16.x before 16.05.7, and 17.x before 17.02.0-pre4 has a vulnerability in how the slurmd daemon informs users of a Prolog failure on a compute node. That vulnerability could allow a user to assume control of an arbitrary file on th...

CVE-2016-10030

CVE-2016-10030 affects Slurm: the Prolog failure handling in slurmd/req.c can let a user influence an arbitrary file if they can cause or anticipate a Prolog script failure on a compute node. Affected versions span Slurm up to present in 0.6.0 onwards, with fixed ranges listed as: before 15.08.13...

CVE-2016-10030

The prologerror function in slurmd/req.c in Slurm before 15.08.13, 16.x before 16.05.7, and 17.x before 17.02.0-pre4 has a vulnerability in how the slurmd daemon informs users of a Prolog failure on a compute node. That vulnerability could allow a user to assume control of an arbitrary file on th...

CVE-2016-10030

Removed by vendor...

CVE-2010-3380

The 1 init.d/slurm and 2 init.d/slurmdbd scripts in SLURM before 2.1.14 place the . dot directory in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

UBUNTU-CVE-2010-3380

The 1 init.d/slurm and 2 init.d/slurmdbd scripts in SLURM before 2.1.14 place the . dot directory in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

Directory traversal

The 1 init.d/slurm and 2 init.d/slurmdbd scripts in SLURM before 2.1.14 place the . dot directory in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2010-3380

The 1 init.d/slurm and 2 init.d/slurmdbd scripts in SLURM before 2.1.14 place the . dot directory in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2010-3380

CVE-2010-3380 affects SLURM before 2.1.14. The (1) init.d/slurm and (2) init.d/slurmdbd scripts place the dot directory in LD_LIBRARY_PATH, enabling local users to escalate privileges via a Trojan horse shared library in the current working directory. Impact is described as local privilege escala...

CVE-2010-3380

Removed by vendor...

CVE-2010-3380

The 1 init.d/slurm and 2 init.d/slurmdbd scripts in SLURM before 2.1.14 place the . dot directory in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

Privilege Escalation Vulnerability in SLURM

SLURM Simple Linux Utility for Resource Management is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Privilege Escalation Vulnerability in SLURM

This host has SLURM Simple Linux Utility for Resource Management installed and is prone to Privilege Escalation vulnerability. OpenVAS Vulnerability Test $Id: secpodslurmprivilegeescalationvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ Privilege Escalation Vulnerability in SLURM Authors: Sharath S...

SLURM Version Detection

This script detects the installed version of SLURM and sets the reuslt in KB. OpenVAS Vulnerability Test $Id: secpodslurmdetect.nasl 7823 2017-11-20 08:54:04Z cfischer $ SLURM Version Detection Authors: Sharath S Copyright: Copyright c 2009 SecPod, http://www.secpod.com This program is free...

SLURM Version Detection

This script detects the installed version of SLURM. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2009-2084

Simple Linux Utility for Resource Management SLURM 1.2 and 1.3 before 1.3.14 does not properly set supplementary groups before invoking 1 sbcast from the slurmd daemon or 2 strigger from the slurmctld daemon, which might allow local SLURM users to modify files and gain privileges...