CVE-2014-0748 | BDVDB-2026-67005 Detail

Description#

apinit on Cray devices with CLE before 4.2.UP02 and 5.x before 5.1.UP00 does not use alpsauth data to validate the UID in a launch message, which allows local users to gain privileges via a modified aprun program, aka ID FN5912.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://labs.mwrinfosecurity.com/advisories/2014/01/31/cray-aprunapinit-privilege-escalation/

Exploit#

No public exploit known

History#

Version 12014-12-27Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.