CVE-2009-2084 | BDVDB-2026-37060 Detail
Description#
Simple Linux Utility for Resource Management (SLURM) 1.2 and 1.3 before 1.3.14 does not properly set supplementary groups before invoking (1) sbcast from the slurmd daemon or (2) strigger from the slurmctld daemon, which might allow local SLURM users to modify files and gain privileges.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50126
- http://www.vupen.com/english/advisories/2009/1128
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=524980
- http://secunia.com/advisories/34831
- http://sourceforge.net/project/shownotes.php?release_id=676055&group_id=157944
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50127
- http://www.securityfocus.com/bid/34638
- http://www.debian.org/security/2009/dsa-1776
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.