Vulnerability Details : CVE-2009-2084
Simple Linux Utility for Resource Management (SLURM) 1.2 and 1.3 before 1.3.14 does not properly set supplementary groups before invoking (1) sbcast from the slurmd daemon or (2) strigger from the slurmctld daemon, which might allow local SLURM users to modify files and gain privileges.
Products affected by CVE-2009-2084
- cpe:2.3:a:llnl:slurm:*:*:*:*:*:*:*:*
- cpe:2.3:a:llnl:slurm:1.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:llnl:slurm:1.3.4:*:*:*:*:*:*:*
- cpe:2.3:a:llnl:slurm:1.3:*:*:*:*:*:*:*
- cpe:2.3:a:llnl:slurm:1.3.8:*:*:*:*:*:*:*
- cpe:2.3:a:llnl:slurm:1.2:*:*:*:*:*:*:*
- cpe:2.3:a:llnl:slurm:1.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:llnl:slurm:1.3.10:*:*:*:*:*:*:*
- cpe:2.3:a:llnl:slurm:1.3.11:*:*:*:*:*:*:*
- cpe:2.3:a:llnl:slurm:1.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:llnl:slurm:1.3.12:*:*:*:*:*:*:*
- cpe:2.3:a:llnl:slurm:1.3.7:*:*:*:*:*:*:*
- cpe:2.3:a:llnl:slurm:1.3.9:*:*:*:*:*:*:*
- cpe:2.3:a:llnl:slurm:1.3.5:*:*:*:*:*:*:*
- cpe:2.3:a:llnl:slurm:1.3.6:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2009-2084
0.06%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 25 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2009-2084
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.2
|
HIGH | AV:L/AC:L/Au:N/C:C/I:C/A:C |
3.9
|
10.0
|
NIST |
CWE ids for CVE-2009-2084
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2009-2084
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/50126
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/50127
-
http://sourceforge.net/project/shownotes.php?release_id=676055&group_id=157944
-
http://www.securityfocus.com/bid/34638
Patch
-
http://www.vupen.com/english/advisories/2009/1128
Patch;Vendor Advisory
-
http://www.debian.org/security/2009/dsa-1776
Patch
-
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=524980
Jump to